[Snyk] Security upgrade @babel/traverse from 7.0.0 to 7.23.2

[Omrisnyk]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • large-file/package.json
  • large-file/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	162/1000 Why? Confidentiality impact: High, Integrity impact: High, Availability impact: High, Scope: Changed, Exploit Maturity: No data, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Local, EPSS: 0.01055, Social Trends: No, Days since published: 3, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: Critical, Package Popularity Score: 99, Impact: 10.1, Likelihood: 1.6, Score Version: V5	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @babel/traverse

• 7.23.2 - 2023-10-11
  

  v@babel/core@7.23.2

• 7.23.0 - 2023-09-25
  

  v7.23.0 (2023-09-25)

  Thanks @ lorenzoferre and @ RajShukla1 for your first PRs!

  🚀 New Feature

  • babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-import-source, babel-plugin-transform-dynamic-import
    • #15870 Support transforming import source for wasm (@ nicolo-ribaudo)
  • babel-helper-module-transforms, babel-helpers, babel-plugin-proposal-import-defer, babel-plugin-syntax-import-defer, babel-plugin-transform-modules-commonjs, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
    • #15878 Implement import defer proposal transform support (@ nicolo-ribaudo)
  • babel-generator, babel-parser, babel-types
    • #15845 Implement import defer parsing support (@ nicolo-ribaudo)
    • #15829 Add parsing support for the "source phase imports" proposal (@ nicolo-ribaudo)
  • babel-generator, babel-helper-module-transforms, babel-parser, babel-plugin-transform-dynamic-import, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-traverse, babel-types
    • #15682 Add createImportExpressions parser option (@ JLHwung)
  • babel-standalone
    • #15671 Pass through nonce to the transformed script element (@ JLHwung)
  • babel-helper-function-name, babel-helper-member-expression-to-functions, babel-helpers, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-optional-chaining-assign, babel-plugin-syntax-optional-chaining-assign, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone, babel-types
    • #15751 Add support for optional chain in assignments (@ nicolo-ribaudo)
  • babel-helpers, babel-plugin-proposal-decorators
    • #15895 Implement the "decorator metadata" proposal (@ nicolo-ribaudo)
  • babel-traverse, babel-types
    • #15893 Add t.buildUndefinedNode (@ liuxingbaoyu)
  • babel-preset-typescript
    • #15913 Add rewriteImportExtensions option to TS preset (@ nicolo-ribaudo)
  • babel-parser
    • #15896 Allow TS tuples to have both labeled and unlabeled elements (@ yukukotani)

  🐛 Bug Fix

  • babel-plugin-transform-block-scoping
    • #15962 fix: transform-block-scoping captures the variables of the method in the loop (@ liuxingbaoyu)

  💅 Polish

  • babel-traverse
    • #15797 Expand evaluation of global built-ins in @ babel/traverse (@ lorenzoferre)
  • babel-plugin-proposal-explicit-resource-management
    • #15985 Improve source maps for blocks with using declarations (@ nicolo-ribaudo)

  🔬 Output optimization

  • babel-core, babel-helper-module-transforms, babel-plugin-transform-async-to-generator, babel-plugin-transform-classes, babel-plugin-transform-dynamic-import, babel-plugin-transform-function-name, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-react-inline-elements, babel-plugin-transform-runtime, babel-plugin-transform-typescript, babel-preset-env
    • #15984 Inline exports.XXX = update in simple variable declarations (@ nicolo-ribaudo)

  Committers: 7

  • Babel Bot (@ babel-bot)
  • Huáng Jùnliàng (@ JLHwung)
  • Lorenzo Ferretti (@ lorenzoferre)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • Raj Pawan Shukla (@ RajShukla1)
  • Yuku Kotani (@ yukukotani)
  • @ liuxingbaoyu
• 7.22.20 - 2023-09-16
  

  v7.22.20 (2023-09-16)

  🏠 Internal

  • babel-helper-validator-identifier
    • #15973 Remove special-casing of U+200C and U+200D (@ nicolo-ribaudo)
  • babel-plugin-transform-dotall-regex
    • #15974 Update Unicode test fixtures (@ JLHwung)

  ↩️ Revert

  • babel-helper-remap-async-to-generator, babel-helper-wrap-function, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-function-sent, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime, babel-preset-env
    • #15979 Revert "Improve output when wrapping functions" (@ jjonescz)

  Committers: 3

  • Huáng Jùnliàng (@ JLHwung)
  • Jan Jones (@ jjonescz)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
• 7.22.19 - 2023-09-14
  

  v7.22.19 (2023-09-14)

  Re-published 7.22.18, due to a releasing error.

• 7.22.18 - 2023-09-14
  

  v7.22.18 (2023-09-14)

  NOTE: This release had a publishing problem -- it has been re-published as 7.22.19.

  Thanks @ dhlolo for your first PR!

  🐛 Bug Fix

  • babel-helper-validator-identifier
    • #15957 Update identifier name definitions to Unicode 15.1 (@ JLHwung)
  • babel-helper-module-transforms, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
    • #15898 Fix transform of named import with shadowed namespace import (@ dhlolo)

  ↩️ Revert

  • #15965 Revert Node.js 20.6.0 bug workaround (@ nicolo-ribaudo)

  Committers: 3

  • Huáng Jùnliàng (@ JLHwung)
  • Int (@ dhlolo)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
• 7.22.17 - 2023-09-08
  

  v7.22.17 (2023-09-08)

  Thanks @ jordanbtucker for your first PR!

  🐛 Bug Fix

  • babel-core
    • #15947 Fix compatibility with Node.js 20.6 (@ nicolo-ribaudo)
  • babel-helper-module-transforms, babel-plugin-transform-modules-commonjs
    • #15941 Fix compiling duplicate ns imports to lazy CommonJS (@ nicolo-ribaudo)
  • babel-types
    • #15920 Make ClassDeclaration["id"] optional in babel-types (@ jordanbtucker)

  🔬 Output optimization

  • babel-helper-remap-async-to-generator, babel-helper-wrap-function, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-function-sent, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime, babel-preset-env
    • #15922 Improve output when wrapping functions (e.g. async functions) (@ liuxingbaoyu)

  Committers: 3

  • Jordan Tucker (@ jordanbtucker)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • @ liuxingbaoyu
• 7.22.15 - 2023-09-04
• 7.22.11 - 2023-08-24
• 7.22.10 - 2023-08-07
• 7.22.8 - 2023-07-06
• 7.22.7 - 2023-07-06
• 7.22.6 - 2023-07-04
• 7.22.5 - 2023-06-08
• 7.22.4 - 2023-05-29
• 7.22.1 - 2023-05-26
• 7.22.0 - 2023-05-26
• 7.21.5 - 2023-04-28
• 7.21.4 - 2023-03-31
• 7.21.4-esm.4 - 2023-04-04
• 7.21.4-esm.3 - 2023-04-04
• 7.21.4-esm.2 - 2023-04-04
• 7.21.4-esm.1 - 2023-04-04
• 7.21.4-esm - 2023-04-04
• 7.21.3 - 2023-03-14
• 7.21.2 - 2023-02-23
• 7.21.0 - 2023-02-20
• 7.20.13 - 2023-01-21
• 7.20.12 - 2023-01-04
• 7.20.10 - 2022-12-23
• 7.20.8 - 2022-12-22
• 7.20.7 - 2022-12-22
• 7.20.5 - 2022-11-28
• 7.20.1 - 2022-11-01
• 7.20.0 - 2022-10-27
• 7.19.6 - 2022-10-20
• 7.19.4 - 2022-10-10
• 7.19.3 - 2022-09-27
• 7.19.1 - 2022-09-14
• 7.19.0 - 2022-09-05
• 7.18.13 - 2022-08-22
• 7.18.11 - 2022-08-04
• 7.18.10 - 2022-08-01
• 7.18.9 - 2022-07-18
• 7.18.8 - 2022-07-08
• 7.18.6 - 2022-06-27
• 7.18.5 - 2022-06-13
• 7.18.2 - 2022-05-25
• 7.18.0 - 2022-05-19
• 7.17.12 - 2022-05-16
• 7.17.10 - 2022-04-29
• 7.17.9 - 2022-04-06
• 7.17.3 - 2022-02-15
• 7.17.0 - 2022-02-02
• 7.16.10 - 2022-01-19
• 7.16.8 - 2022-01-10
• 7.16.7 - 2021-12-31
• 7.16.5 - 2021-12-13
• 7.16.3 - 2021-11-09
• 7.16.0 - 2021-10-29
• 7.15.4 - 2021-09-02
• 7.15.0 - 2021-08-04
• 7.14.9 - 2021-08-01
• 7.14.8 - 2021-07-20
• 7.14.7 - 2021-06-21
• 7.14.5 - 2021-06-09
• 7.14.2 - 2021-05-12
• 7.14.0 - 2021-04-29
• 7.13.17 - 2021-04-20
• 7.13.15 - 2021-04-08
• 7.13.13 - 2021-03-26
• 7.13.0 - 2021-02-22
• 7.12.17 - 2021-02-18
• 7.12.13 - 2021-02-03
• 7.12.12 - 2020-12-23
• 7.12.10 - 2020-12-09
• 7.12.9 - 2020-11-24
• 7.12.8 - 2020-11-23
• 7.12.7 - 2020-11-20
• 7.12.5 - 2020-11-03
• 7.12.1 - 2020-10-15
• 7.12.0 - 2020-10-14
• 7.11.5 - 2020-08-31
• 7.11.0 - 2020-07-30
• 7.10.5 - 2020-07-14
• 7.10.4 - 2020-06-30
• 7.10.3 - 2020-06-19
• 7.10.1 - 2020-05-27
• 7.10.0 - 2020-05-26
• 7.9.6 - 2020-04-29
• 7.9.5 - 2020-04-07
• 7.9.0 - 2020-03-20
• 7.8.6 - 2020-02-27
• 7.8.4 - 2020-01-30
• 7.8.3 - 2020-01-13
• 7.8.0 - 2020-01-12
• 7.7.4 - 2019-11-22
• 7.7.2 - 2019-11-06
• 7.7.0 - 2019-11-05
• 7.6.3 - 2019-10-08
• 7.6.2 - 2019-09-23
• 7.6.0 - 2019-09-06
• 7.5.5 - 2019-07-17
• 7.5.0 - 2019-07-04
• 7.4.5 - 2019-05-21
• 7.4.4 - 2019-04-26
• 7.4.3 - 2019-04-02
• 7.4.0 - 2019-03-19
• 7.3.4 - 2019-02-25
• 7.2.3 - 2018-12-20
• 7.2.2 - 2018-12-15
• 7.1.6 - 2018-11-13
• 7.1.5 - 2018-11-06
• 7.1.4 - 2018-10-11
• 7.1.3 - 2018-10-11
• 7.1.0 - 2018-09-17
• 7.0.0 - 2018-08-27

from @babel/traverse GitHub release notes

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.