[Snyk] Upgrade @babel/preset-env from 7.5.0 to 7.24.4 #1687

mdfkbtc · 2024-05-18T21:39:56Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @babel/preset-env from 7.5.0 to 7.24.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 105 versions ahead of your current version.
The recommended version was released a month ago, on 2024-04-03.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @babel/preset-env

7.24.4 - 2024-04-03
v7.24.4 (2024-04-03)

Thanks @ Dunqing, @ luiscubal, and @ samualtnorman for your first PRs!

👓 Spec Compliance
- babel-parser
  - #16403 Forbid initializerless using (@ JLHwung)
- babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
  - #16388 Ensure decorators are callable (@ JLHwung)
🐛 Bug Fix
- babel-generator
  - #16402 fix: Correctly prints { [key in Bar]? } (@ liuxingbaoyu)
  - #16394 fix: Correctly generate TSMappedType (@ liuxingbaoyu)
- babel-compat-data, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-preset-env
  - #16390 Create bugfix plugin for classes in computed keys in Firefox (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16387 fix: support mutated outer decorated class binding (@ JLHwung)
  - #16385 fix: Decorators when super() exists and protoInit is not needed (@ liuxingbaoyu)
- babel-plugin-transform-block-scoping
  - #16384 fix: Transform scoping for for X in loop (@ liuxingbaoyu)
  - #16368 fix: Capture let when the for body is not a block (@ liuxingbaoyu)
- babel-core, babel-plugin-transform-block-scoped-functions, babel-plugin-transform-block-scoping
  - #16363 Fix incorrect function hoisting in some case statements (@ luiscubal)
Committers: 7
- Babel Bot (@ babel-bot)
- Dunqing (@ Dunqing)
- Huáng Jùnliàng (@ JLHwung)
- Luís Reis (@ luiscubal)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Samual Norman (@ samualtnorman)
- @ liuxingbaoyu
7.24.3 - 2024-03-20
v7.24.3 (2024-03-20)

Thanks @ ota-meshi for your first PR!

🐛 Bug Fix
- babel-helper-module-imports
  - #16370 fix: do not inject the same imported identifier multiple times (@ ota-meshi)
Committers: 2
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Yosuke Ota (@ ota-meshi)
7.24.1 - 2024-03-19
v7.24.1 (2024-03-19)

🐛 Bug Fix
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16350 Fix decorated class computed keys ordering (@ JLHwung)
  - #16344 Fix decorated class static field private access (@ JLHwung)
- babel-plugin-proposal-decorators, babel-plugin-proposal-json-modules, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
  - #16329 Respect moduleName for @ babel/runtime/regenerator imports (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
  - #16331 Fix decorator memoiser binding kind (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
  - #16325 Fix decorator evaluation private environment (@ JLHwung)
📝 Documentation
- #16319 Update SECURITY.md (@ nicolo-ribaudo)
🏠 Internal
- babel-code-frame, babel-highlight
  - #16359 Replace chalk with picocolors (@ nicolo-ribaudo)
- babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-preset-flow
  - #16352 Run Babel transform tests on old node if possible (@ JLHwung)
- babel-helper-module-imports, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-plugin-proposal-record-and-tuple, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx
  - #16349 Support merging imports in import injector (@ nicolo-ribaudo)
- Other
  - #16332 Test Babel 7 plugins compatibility with Babel 8 core (@ nicolo-ribaudo)
🔬 Output optimization
- babel-helper-replace-supers, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime
  - #16345 Optimize the use of assertThisInitialized after super() (@ liuxingbaoyu)
- babel-plugin-transform-class-properties, babel-plugin-transform-classes
  - #16343 Use simpler assertThisInitialized more often (@ liuxingbaoyu)
- babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-object-rest-spread, babel-traverse
  - #16342 Consider well-known and registered symbols as literals (@ nicolo-ribaudo)
- babel-core, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-function-bind, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-flow-comments, babel-plugin-transform-flow-strip-types, babel-plugin-transform-function-name, babel-plugin-transform-modules-systemjs, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx, babel-plugin-transform-runtime, babel-plugin-transform-spread, babel-plugin-transform-typescript, babel-preset-env
  - #16326 Reduce the use of class names (@ liuxingbaoyu)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.24.0 - 2024-02-28
v7.24.0 (2024-02-28)

Thanks @ ajihyf for your first PR!

Release post with summary and highlights: https://babeljs.io/7.24.0

🚀 New Feature
- babel-standalone
  - #11696 Export babel tooling packages in @ babel/standalone (@ ajihyf)
- babel-core, babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-transform-class-properties
  - #16267 Implement noUninitializedPrivateFieldAccess assumption (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-syntax-decorators, babel-plugin-transform-class-properties, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16242 Support decorator 2023-11 normative updates (@ JLHwung)
- babel-preset-flow
  - #16309 [babel 7] Allow setting ignoreExtensions in Flow preset (@ nicolo-ribaudo)
  - #16284 Add experimental_useHermesParser option in preset-flow (@ liuxingbaoyu)
- babel-helper-import-to-platform-api, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-standalone
  - #16172 Add transform support for JSON modules imports (@ nicolo-ribaudo)
- babel-plugin-transform-runtime
  - #16241 Add back moduleName option to @ babel/plugin-transform-runtime (@ nicolo-ribaudo)
- babel-parser, babel-types
  - #16277 Allow import attributes for TSImportType (@ sosukesuzuki)
🐛 Bug Fix
- babel-plugin-proposal-do-expressions, babel-traverse
  - #16305 fix: avoid popContext on unvisited node paths (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object
  - #16312 Fix class private properties when privateFieldsAsSymbols (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods
  - #16307 Fix the support of arguments in private get/set method (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators
  - #16287 Reduce decorator static property size (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16281 Fix evaluation order of decorators with cached receiver (@ nicolo-ribaudo)
  - #16279 Fix decorator this memoization (@ JLHwung)
  - #16266 Preserve static on decorated private accessor (@ nicolo-ribaudo)
  - #16258 fix: handle decorated async private method and generator (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-preset-env
  - #16275 Fix class private properties when privateFieldsAsProperties (@ liuxingbaoyu)
- babel-helpers
  - #16268 Do not consider arguments in a helper as a global reference (@ nicolo-ribaudo)
- babel-helpers, babel-plugin-proposal-decorators
  - #16270 Handle symbol key class elements decoration (@ JLHwung)
  - #16265 Do not define access.get for public setter decorators (@ nicolo-ribaudo)
💅 Polish
- babel-core, babel-helper-create-class-features-plugin, babel-preset-env
  - #12428 Suggest using BABEL_SHOW_CONFIG_FOR for config problems (@ nicolo-ribaudo)
🏠 Internal
- babel-helper-transform-fixture-test-runner
  - #16278 Continue writing output.js when exec.js throws (@ liuxingbaoyu)
🔬 Output optimization
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16306 Avoid intermediate functions for private accessors with decs (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
  - #16294 More aggressively inline decorators in the static block (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-transform-private-methods
  - #16283 Do not use classPrivateMethodGet (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators
  - #16287 Reduce decorator static property size (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
  - #16280 Reduce element decorator temp variables (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-optional-chaining-assign, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16261 Do not use descriptors for private class elements (@ nicolo-ribaudo)
- babel-helpers, babel-plugin-proposal-decorators
  - #16263 Reduce helper size for decorator 2023-11 (@ liuxingbaoyu)
Committers: 7
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- SUZUKI Sosuke (@ sosukesuzuki)
- Yarden Shoham (@ yardenshoham)
- @ liuxingbaoyu
- flyafly (@ ajihyf)
7.23.9 - 2024-01-25
v7.23.9 (2024-01-25)

🐛 Bug Fix
- babel-helper-transform-fixture-test-runner, babel-plugin-transform-function-name, babel-plugin-transform-modules-systemjs, babel-preset-env
  - #16225 fix: systemjs re-traverses helpers (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16226 Improve decorated private method check (@ JLHwung)
- babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-runtime, babel-preset-env
  - #16224 Properly sort core-js@3 imports (@ nicolo-ribaudo)
- babel-traverse
  - #15383 fix: Don't throw in getTypeAnnotation when using TS+inference (@ liuxingbaoyu)
- Other
  - #16210 [eslint] Fix no-use-before-define for class ref in fields (@ nicolo-ribaudo)
🏠 Internal
- babel-core, babel-parser, babel-template
  - #16222 Migrate eslint-parser to cts (@ liuxingbaoyu)
- babel-types
  - #16213 Remove @ babel/types props that are not produced by the parser (@ liuxingbaoyu)
🏃‍♀️ Performance
- babel-parser
  - #16072 perf: Improve parser performance for typescript (@ liuxingbaoyu)
🔬 Output optimization
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-new-target, babel-plugin-transform-parameters, babel-plugin-transform-private-methods, babel-preset-env
  - #16218 Improve temporary variables for decorators (@ liuxingbaoyu)
- babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #15959 Improve output of using (@ liuxingbaoyu)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.23.8 - 2024-01-08
v7.23.8 (2024-01-08)

🐛 Bug Fix
- babel-preset-env
  - #16181 fix: preset-env throws exception for export * as x (@ liuxingbaoyu)
- babel-helpers, babel-plugin-proposal-decorators
  - #16201 fix: decorator binds getter/setter to ctx.access for public fields (@ liuxingbaoyu)
  - #16199 fix: Class decorator correctly passes return value (@ liuxingbaoyu)
↩️ Revert
- #16202 Revert "chore: Update artifact tools (#16184)" (@ JLHwung)
🔬 Output optimization
- babel-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-plugin-transform-parameters, babel-plugin-transform-react-jsx, babel-plugin-transform-runtime, babel-plugin-transform-spread, babel-plugin-transform-typescript, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16194 Improve output of super() (@ liuxingbaoyu)
Committers: 3
- Huáng Jùnliàng (@ JLHwung)
- @ liuxingbaoyu
- coderaiser (@ coderaiser)
7.23.7 - 2023-12-29
7.23.6 - 2023-12-11
7.23.5 - 2023-11-29
7.23.3 - 2023-11-09
7.23.2 - 2023-10-11
7.22.20 - 2023-09-16
7.22.15 - 2023-09-04
7.22.14 - 2023-08-30
7.22.10 - 2023-08-07
7.22.9 - 2023-07-12
7.22.7 - 2023-07-06
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.4 - 2023-05-29
7.22.2 - 2023-05-26
7.22.1 - 2023-05-26
7.22.0 - 2023-05-26
7.21.5 - 2023-04-28
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.20.2 - 2022-11-04
7.19.4 - 2022-10-10
7.19.3 - 2022-09-27
7.19.1 - 2022-09-14
7.19.0 - 2022-09-05
7.18.10 - 2022-08-01
7.18.9 - 2022-07-18
7.18.6 - 2022-06-27
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.10 - 2022-04-29
7.16.11 - 2022-01-20
7.16.10 - 2022-01-19
7.16.8 - 2022-01-10
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.4 - 2021-11-16
7.16.0 - 2021-10-29
7.15.8 - 2021-10-06
7.15.6 - 2021-09-09
7.15.4 - 2021-09-02
7.15.0 - 2021-08-04
7.14.9 - 2021-08-01
7.14.8 - 2021-07-20
7.14.7 - 2021-06-21
7.14.5 - 2021-06-09
7.14.4 - 2021-05-28
7.14.2 - 2021-05-12
7.14.1 - 2021-05-04
7.14.0 - 2021-04-29
7.13.15 - 2021-04-08
7.13.12 - 2021-03-22
7.13.10 - 2021-03-08
7.13.9 - 2021-03-01
7.13.8 - 2021-02-26
7.13.5 - 2021-02-23
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.16 - 2021-02-11
7.12.13 - 2021-02-03
7.12.11 - 2020-12-15
7.12.10 - 2020-12-09
7.12.7 - 2020-11-20
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.5 - 2020-08-31
7.11.0 - 2020-07-30
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.2 - 2020-05-30
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.6 - 2020-04-29
7.9.5 - 2020-04-07
7.9.0 - 2020-03-20
7.8.7 - 2020-03-05
7.8.6 - 2020-02-27
7.8.4 - 2020-01-30
7.8.3 - 2020-01-13
7.8.2 - 2020-01-12
7.8.0 - 2020-01-12
7.7.7 - 2019-12-19
7.7.6 - 2019-12-07
7.7.5 - 2019-12-06
7.7.4 - 2019-11-22
7.7.1 - 2019-11-05
7.7.0 - 2019-11-05
7.6.3 - 2019-10-08
7.6.2 - 2019-09-23
7.6.0 - 2019-09-06
7.5.5 - 2019-07-17
7.5.4 - 2019-07-09
7.5.3 - 2019-07-09
7.5.2 - 2019-07-08
7.5.0 - 2019-07-04

from @babel/preset-env GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Note: This is a default PR template raised by Snyk. Find out more about how you can customise Snyk PRs in our documentation.

Snyk has created this PR to upgrade @babel/preset-env from 7.5.0 to 7.24.4. See this package in npm: @babel/preset-env See this project in Snyk: https://app.snyk.io/org/mdfkbtc/project/a2088718-36c2-4867-a45b-42143012aac0?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade @babel/preset-env from 7.5.0 to 7.24.4 #1687

[Snyk] Upgrade @babel/preset-env from 7.5.0 to 7.24.4 #1687

mdfkbtc commented May 18, 2024

v7.24.4 (2024-04-03)

👓 Spec Compliance

🐛 Bug Fix

Committers: 7

v7.24.3 (2024-03-20)

🐛 Bug Fix

Committers: 2

v7.24.1 (2024-03-19)

🐛 Bug Fix

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 4

v7.24.0 (2024-02-28)

🚀 New Feature

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

Committers: 7

v7.23.9 (2024-01-25)

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

🔬 Output optimization

Committers: 4

v7.23.8 (2024-01-08)

🐛 Bug Fix

↩️ Revert

🔬 Output optimization

Committers: 3

[Snyk] Upgrade @babel/preset-env from 7.5.0 to 7.24.4 #1687

Are you sure you want to change the base?

[Snyk] Upgrade @babel/preset-env from 7.5.0 to 7.24.4 #1687

Conversation

mdfkbtc commented May 18, 2024

Snyk has created this PR to upgrade @babel/preset-env from 7.5.0 to 7.24.4.

v7.24.4 (2024-04-03)

👓 Spec Compliance

🐛 Bug Fix

Committers: 7

v7.24.3 (2024-03-20)

🐛 Bug Fix

Committers: 2

v7.24.1 (2024-03-19)

🐛 Bug Fix

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 4

v7.24.0 (2024-02-28)

🚀 New Feature

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

Committers: 7

v7.23.9 (2024-01-25)

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

🔬 Output optimization

Committers: 4

v7.23.8 (2024-01-08)

🐛 Bug Fix

↩️ Revert

🔬 Output optimization

Committers: 3