[Snyk] Upgrade: @babel/generator, @babel/parser, @babel/template, @babel/traverse, @babel/types #2

snyk-bot · 2021-08-11T19:03:08Z

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on
@babel/generator from 7.1.3 to 7.14.8	58 versions ahead of your current version	22 days ago on 2021-07-20
@babel/parser from 7.1.3 to 7.14.8	81 versions ahead of your current version	22 days ago on 2021-07-20
@babel/template from 7.1.2 to 7.14.5	16 versions ahead of your current version	2 months ago on 2021-06-09
@babel/traverse from 7.1.4 to 7.14.8	50 versions ahead of your current version	22 days ago on 2021-07-20
@babel/types from 7.1.3 to 7.14.8	56 versions ahead of your current version	22 days ago on 2021-07-20

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Prototype Pollution SNYK-JS-LODASH-608086	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-590103	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Prototype Pollution SNYK-JS-LODASH-450202	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Command Injection SNYK-JS-LODASH-1040724	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-567746	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @babel/generator

7.14.8 - 2021-07-20
v7.14.8 (2021-07-20)

Thanks @ colinaaa, @ jaeseokk and @ nme077 for your first PRs!

👓 Spec Compliance
- babel-helper-create-class-features-plugin, babel-plugin-proposal-class-static-block, babel-plugin-transform-new-target
  - #13560 fix(class-properties): replace new.target in static properties with undefined (@ colinaaa)
- babel-parser
  - #13088 Fix await binding error within static block (@ JLHwung)
  - #13531 fix: disallow computed async/get/set keyword (@ JLHwung)
- babel-helper-module-transforms, babel-helper-simple-access, babel-plugin-transform-modules-commonjs
  - #13258 Fix const violations in ESM imports when transformed to CJS (@ overlookmotel)
🐛 Bug Fix
- babel-parser
  - #13575 Update babel-parser.d.ts (@ sosukesuzuki)
  - #13548 Fix parser strictMode option (@ overlookmotel)
  - #13573 Fix issue to allow module block in member expression (@ nme077)
  - #13521 Overhaul comment attachment (@ JLHwung)
  - #13534 Async do expression should start at async (@ JLHwung)
- babel-plugin-transform-arrow-functions, babel-traverse
  - #12344 Fix arrow transformation when arguments is defined as variable (@ snitin315)
- babel-traverse
  - #13527 fix: accept duplicated import/variable in different module (@ colinaaa)
- babel-types
  - #13525 fix(babel-types): accept UnaryExpression in TSLiteralType (@ colinaaa)
  - #13500 Add typeParameters to tagged template visitor keys (@ JLHwung)
💅 Polish
- babel-core
  - #13515 Fix config validation message typo (@ jaeseokk)
- babel-cli
  - #13508 fix: sync default_extensions to babel-cli usage (@ JLHwung)
📝 Documentation
- #13562 Fix make generate-standalone -> make build-standalone (@ sosukesuzuki)
🏠 Internal
- babel-helpers
  - #13522 minor improvement to gulp generate-runtime-helpers error message (@ lightmare)
🏃‍♀️ Performance
- babel-parser
  - #13521 Overhaul comment attachment (@ JLHwung)
Committers: 12
- Babel Bot (@ babel-bot)
- Bogdan Savluk (@ zxbodya)
- Federico Ciardi (@ fedeci)
- Huáng Jùnliàng (@ JLHwung)
- Jaeseok Kang (@ jaeseokk)
- Mickey Rose (@ lightmare)
- Nicholas Eveland (@ nme077)
- Nitin Kumar (@ snitin315)
- Sosuke Suzuki (@ sosukesuzuki)
- Tony Gorez (@ tony-go)
- @ overlookmotel
- 王清雨 (@ colinaaa)
7.14.5 - 2021-06-09
v7.14.5 (2021-06-09)

Thanks @ Eyoatam, @ lightmare, @ ota-meshi, and @ tony-go for your first PRs!

👓 Spec Compliance
- babel-plugin-proposal-do-expressions, babel-traverse
  - #13122 fix: hoist variable declaration within do block (@ JLHwung)
- babel-parser
  - #13409 Relax import assertion key-is-type constraint (@ JLHwung)
🐛 Bug Fix
- babel-parser
  - #13418 fix(parser): correctly parse record and tuple tokens (@ fedeci)
  - #13410 fix: throw when async() call param is object with assignement (@ tony-go)
  - #13396 Add support for d flag of regex literals in parser (@ ota-meshi)
- babel-helpers
  - #13404 fix generate-helpers failing in URL-encoded path (@ lightmare)
🏠 Internal
- babel-helper-hoist-variables
  - #13442 Disallow dependency cycles (@ nicolo-ribaudo)
- babel-parser
  - #13440 update test fixtures (@ JLHwung)
  - #13431 Reduce exprAllowed usage (@ JLHwung)
  - #13422 fix(@ babel/parser): fix tokenizer context update code (@ Eyoatam)
- Other
  - #13420 chore: specify @ babel/eslint-parser deps (@ JLHwung)
- Every package
  - #13363 chore: setup Yarn constraints (@ merceyz)
🏃‍♀️ Performance
- babel-parser
  - #13408 Use set in parser scope (@ JLHwung)
  - #13386 Faster checkReservedWord (@ JLHwung)
  - #13406 Back parser state exportedIdentifiers by set (@ JLHwung)
Committers: 9
- Daniel Tschinder (@ danez)
- Eyoatam Tamirat (@ Eyoatam)
- Federico Ciardi (@ fedeci)
- Huáng Jùnliàng (@ JLHwung)
- Kristoffer K. (@ merceyz)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Tony Gorez (@ tony-go)
- Yosuke Ota (@ ota-meshi)
- @ lightmare
7.14.3 - 2021-05-17
v7.14.3 (2021-05-17)

🐛 Bug Fix
- babel-core
  - #13321 Pass assumptions set in presets to plugins (@ nicolo-ribaudo)
- babel-parser
  - #13326 fix: preserve tokensLength in tryParse (@ JLHwung)
  - #13325 Parse let declarations whose id starts with \ (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-class-properties, babel-plugin-proposal-class-static-block
  - #13303 Don't duplicate the base class when using constantSuper (@ nicolo-ribaudo)
🏠 Internal
- Other
  - #13313 chore: add class-static-block test262 mapping (@ JLHwung)
- babel-plugin-transform-block-scoping
  - #13304 Add test for fixed block scoping issue (@ nicolo-ribaudo)
🔬 Output optimization
- babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-class-static-block, babel-preset-env
  - #13297 Compile static blocks without the intermediate priv field step (@ nicolo-ribaudo)
Committers: 4
- Babel Bot (@ babel-bot)
- Bogdan Savluk (@ zxbodya)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
7.14.2 - 2021-05-12
Read more
7.14.1 - 2021-05-04
v7.14.1 (2021-05-04)

Thanks @ aancer-rca for your first PR to Babel.

🐛 Bug Fix
- babel-parser
  - #13243 Parse static blocks with typescript plugin (@ sosukesuzuki)
- babel-plugin-transform-block-scoping
  - #13248 Fix plugin-transform-block-scoping const violations (@ overlookmotel)
- babel-generator, babel-parser
  - #13244 Parse for await (async of ...) (@ Zalathar)
- babel-helper-create-class-features-plugin
  - #13237 fix: Typo in @ babel/helper-create-class-features-plugin (@ aancer-rca)
📝 Documentation
- babel-types
  - #13151 Add alias docs for @ babel/types (@ JLHwung)
🏠 Internal
- babel-parser
  - #13242 Don't use "composite": true in tsc (until it supports cycles) (@ nicolo-ribaudo)
  - #13241 chore: remove duplicated test262 parser tests (@ JLHwung)
- babel-plugin-proposal-export-namespace-from, babel-plugin-syntax-module-string-names, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd
  - #13246 Archive @ babel/plugin-syntax-module-string-names (@ nicolo-ribaudo)
- babel-core, babel-plugin-proposal-class-properties, babel-plugin-proposal-class-static-block, babel-plugin-proposal-private-methods, babel-plugin-proposal-private-property-in-object, babel-plugin-syntax-class-properties, babel-plugin-transform-flow-comments, babel-plugin-transform-flow-strip-types, babel-plugin-transform-modules-commonjs, babel-plugin-transform-typescript, babel-plugin-transform-unicode-escapes, babel-preset-env, babel-standalone
  - #13232 Archive @ babel/plugin-syntax-class-properties (@ nicolo-ribaudo)
Committers: 7
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sosuke Suzuki (@ sosukesuzuki)
- Stuart Cook (@ Zalathar)
- @ aancer-rca
- @ overlookmotel
7.14.0 - 2021-04-29
Read more
7.13.16 - 2021-04-20
7.13.9 - 2021-03-01
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.15 - 2021-02-04
7.12.13 - 2021-02-03
7.12.11 - 2020-12-15
7.12.10 - 2020-12-09
7.12.5 - 2020-11-03
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.6 - 2020-09-03
7.11.5 - 2020-08-31
7.11.4 - 2020-08-20
7.11.0 - 2020-07-30
7.10.5 - 2020-07-14
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.2 - 2020-05-30
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.6 - 2020-04-29
7.9.5 - 2020-04-07
7.9.4 - 2020-03-24
7.9.3 - 2020-03-22
7.9.0 - 2020-03-20
7.8.8 - 2020-03-12
7.8.7 - 2020-03-05
7.8.6 - 2020-02-27
7.8.4 - 2020-01-30
7.8.3 - 2020-01-13
7.8.0 - 2020-01-12
7.7.7 - 2019-12-19
7.7.4 - 2019-11-22
7.7.2 - 2019-11-06
7.7.0 - 2019-11-05
7.6.4 - 2019-10-10
7.6.3 - 2019-10-08
7.6.2 - 2019-09-23
7.6.0 - 2019-09-06
7.5.5 - 2019-07-17
7.5.0 - 2019-07-04
7.4.4 - 2019-04-26
7.4.0 - 2019-03-19
7.3.4 - 2019-02-25
7.3.3 - 2019-02-15
7.3.2 - 2019-02-04
7.3.0 - 2019-01-21
7.2.2 - 2018-12-15
7.2.0 - 2018-12-03
7.1.6 - 2018-11-13
7.1.5 - 2018-11-06
7.1.3 - 2018-10-11

from @babel/generator GitHub release notes

Package name: @babel/parser

7.14.8 - 2021-07-20
Read more
7.14.7 - 2021-06-21
Read more
7.14.6 - 2021-06-14
Read more
7.14.5 - 2021-06-09
Read more
7.14.4 - 2021-05-28
Read more
7.14.3 - 2021-05-17
Read more
7.14.2 - 2021-05-12
Read more
7.14.1 - 2021-05-04
Read more
7.14.0 - 2021-04-29
Read more
7.13.16 - 2021-04-20
7.13.15 - 2021-04-08
7.13.13 - 2021-03-26
7.13.12 - 2021-03-22
7.13.11 - 2021-03-15
7.13.10 - 2021-03-08
7.13.9 - 2021-03-01
7.13.4 - 2021-02-23
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.16 - 2021-02-11
7.12.15 - 2021-02-04
7.12.14 - 2021-02-03
7.12.13 - 2021-02-03
7.12.11 - 2020-12-15
7.12.10 - 2020-12-09
7.12.7 - 2020-11-20
7.12.5 - 2020-11-03
7.12.3 - 2020-10-16
7.12.2 - 2020-10-16
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.5 - 2020-08-31
7.11.4 - 2020-08-20
7.11.3 - 2020-08-08
7.11.2 - 2020-08-05
7.11.1 - 2020-08-04
7.11.0 - 2020-07-30
7.10.5 - 2020-07-14
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.2 - 2020-05-30
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.6 - 2020-04-29
7.9.4 - 2020-03-24
7.9.3 - 2020-03-22
7.9.2 - 2020-03-21
7.9.0 - 2020-03-20
7.8.8 - 2020-03-12
7.8.7 - 2020-03-05
7.8.6 - 2020-02-27
7.8.4 - 2020-01-30
7.8.3 - 2020-01-13
7.8.0 - 2020-01-12
7.7.7 - 2019-12-19
7.7.5 - 2019-12-06
7.7.4 - 2019-11-22
7.7.3 - 2019-11-08
7.7.2 - 2019-11-06
7.7.0 - 2019-11-05
7.6.4 - 2019-10-10
7.6.3 - 2019-10-08
7.6.2 - 2019-09-23
7.6.0 - 2019-09-06
7.5.5 - 2019-07-17
7.5.0 - 2019-07-04
7.4.5 - 2019-05-21
7.4.4 - 2019-04-26
7.4.3 - 2019-04-02
7.4.2 - 2019-03-21
7.4.0 - 2019-03-19
7.3.4 - 2019-02-25
7.3.3 - 2019-02-15
7.3.2 - 2019-02-04
7.3.1 - 2019-01-22
7.3.0 - 2019-01-21
7.2.3 - 2018-12-20
7.2.2 - 2018-12-15
7.2.0 - 2018-12-03
7.1.6 - 2018-11-13
7.1.5 - 2018-11-06
7.1.3 - 2018-10-11

from @babel/parser GitHub release notes

Package name: @babel/template

7.14.5 - 2021-06-09
Read more
7.12.13 - 2021-02-03
7.12.7 - 2020-11-20
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.8.6 - 2020-02-27
7.8.3 - 2020-01-13
7.8.0 - 2020-01-12
7.7.4 - 2019-11-22
7.7.0 - 2019-11-05
7.6.0 - 2019-09-06
7.4.4 - 2019-04-26
7.4.0 - 2019-03-19
7.2.2 - 2018-12-15
7.1.2 - 2018-09-28

from @babel/template GitHub release notes

Package name: @babel/traverse

7.14.8 - 2021-07-20
Read more
7.14.7 - 2021-06-21
Read more
7.14.5 - 2021-06-09
Read more
7.14.2 - 2021-05-12
Read more
7.14.0 - 2021-04-29
Read more
7.13.17 - 2021-04-20
Read more
7.13.15 - 2021-04-08
7.13.13 - 2021-03-26
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.13 - 2021-02-03
7.12.12 - 2020-12-23
7.12.10 - 2020-12-09
7.12.9 - 2020-11-24
7.12.8 - 2020-11-23
7.12.7 - 2020-11-20
7.12.5 - 2020-11-03
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.5 - 2020-08-31
7.11.0 - 2020-07-30
7.10.5 - 2020-07-14
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.6 - 2020-04-29
7.9.5 - 2020-04-07
7.9.0 - 2020-03-20
7.8.6 - 2020-02-27
7.8.4 - 2020-01-30
7.8.3 - 2020-01-13
7.8.0 - 2020-01-12
7.7.4 - 2019-11-22
7.7.2 - 2019-11-06
7.7.0 - 2019-11-05
7.6.3 - 2019-10-08
7.6.2 - 2019-09-23
7.6.0 - 2019-09-06
7.5.5 - 2019-07-17
7.5.0 - 2019-07-04
7.4.5 - 2019-05-21
7.4.4 - 2019-04-26
7.4.3 - 2019-04-02
7.4.0 - 2019-03-19
7.3.4 - 2019-02-25
7.2.3 - 2018-12-20
7.2.2 - 2018-12-15
7.1.6 - 2018-11-13
7.1.5 - 2018-11-06
7.1.4 - 2018-10-11

from @babel/traverse GitHub release notes

Package name: @babel/types

7.14.8 - 2021-07-20
Read more
7.14.5 - 2021-06-09
Read more
7.14.4 - 2021-05-28
Read more
7.14.2 - 2021-05-12
Read more
7.14.1 - 2021-05-04
Read more
7.14.0 - 2021-04-29
Read more
7.13.17 - 2021-04-20
Read more
7.13.16 - 2021-04-20
7.13.14 - 2021-03-29
7.13.13 - 2021-03-26
7.13.12 - 2021-03-22
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.13 - 2021-02-03
7.12.12 - 2020-12-23
7.12.11 - 2020-12-15
7.12.10 - 2020-12-09
7.12.7 - 2020-11-20
7.12.6 - 2020-11-04
7.12.5 - 2020-11-03
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.5 - 2020-08-31
7.11.0 - 2020-07-30
7.10.5 - 2020-07-14
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.2 - 2020-05-30
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.6 - 2020-04-29
7.9.5 - 2020-04-07
7.9.0 - 2020-03-20
7.8.7 - 2020-03-05
7.8.6 - 2020-02-27
7.8.3 - 2020-01-13
7.8.0 - 2020-01-12
7.7.4 - 2019-11-22
7.7.2 - 2019-11-06
7.7.1 - 2019-11-05
7.7.0 - 2019-11-05
7.6.3 - 2019-10-08
7.6.1 - 2019-09-06
7.6.0 - 2019-09-06
7.5.5 - 2019-07-17
7.5.0 - 2019-07-04
7.4.4 - 2019-04-26
7.4.0 - 2019-03-19
7.3.4 - 2019-02-25
7.3.3 - 2019-02-15
7.3.2 - 2019-02-04
7.3.0 - 2019-01-21
7.2.2 - 2018-12-15
7.2.0 - 2018-12-03
7.1.6 - 2018-11-13
7.1.5 - 2018-11-06
7.1.3 - 2018-10-11

from @babel/types GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - @babel/generator from 7.1.3 to 7.14.8. See this package in npm: https://www.npmjs.com/package/@babel/generator - @babel/parser from 7.1.3 to 7.14.8. See this package in npm: https://www.npmjs.com/package/@babel/parser - @babel/template from 7.1.2 to 7.14.5. See this package in npm: https://www.npmjs.com/package/@babel/template - @babel/traverse from 7.1.4 to 7.14.8. See this package in npm: https://www.npmjs.com/package/@babel/traverse - @babel/types from 7.1.3 to 7.14.8. See this package in npm: https://www.npmjs.com/package/@babel/types See this project in Snyk: https://app.snyk.io/org/andrea-mariadb-2/project/116ca04d-82b6-4157-8b98-67d6aabcfe1f?utm_source=github&utm_medium=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: @babel/generator, @babel/parser, @babel/template, @babel/traverse, @babel/types #2

[Snyk] Upgrade: @babel/generator, @babel/parser, @babel/template, @babel/traverse, @babel/types #2

snyk-bot commented Aug 11, 2021

v7.14.8 (2021-07-20)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🏃‍♀️ Performance

Committers: 12

v7.14.5 (2021-06-09)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

Committers: 9

v7.14.3 (2021-05-17)

🐛 Bug Fix

🏠 Internal

🔬 Output optimization

Committers: 4

v7.14.1 (2021-05-04)

🐛 Bug Fix

📝 Documentation

🏠 Internal

Committers: 7

[Snyk] Upgrade: @babel/generator, @babel/parser, @babel/template, @babel/traverse, @babel/types #2

Are you sure you want to change the base?

[Snyk] Upgrade: @babel/generator, @babel/parser, @babel/template, @babel/traverse, @babel/types #2

Conversation

snyk-bot commented Aug 11, 2021

Snyk has created this PR to upgrade multiple dependencies.

v7.14.8 (2021-07-20)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🏃‍♀️ Performance

Committers: 12

v7.14.5 (2021-06-09)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

Committers: 9

v7.14.3 (2021-05-17)

🐛 Bug Fix

🏠 Internal

🔬 Output optimization

Committers: 4

v7.14.1 (2021-05-04)

🐛 Bug Fix

📝 Documentation

🏠 Internal

Committers: 7