[Snyk] Upgrade: @babel/core, @babel/plugin-proposal-class-properties, @babel/plugin-transform-runtime, @babel/preset-flow, @babel/preset-react #177

MelvinBot · 2023-12-09T14:17:19Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on
@babel/core from 7.17.10 to 7.23.3	43 versions ahead of your current version	a month ago on 2023-11-09
@babel/plugin-proposal-class-properties from 7.16.7 to 7.18.6	2 versions ahead of your current version	a year ago on 2022-06-27
@babel/plugin-transform-runtime from 7.17.10 to 7.23.3	27 versions ahead of your current version	a month ago on 2023-11-09
@babel/preset-flow from 7.16.7 to 7.23.3	11 versions ahead of your current version	a month ago on 2023-11-09
@babel/preset-react from 7.16.7 to 7.23.3	12 versions ahead of your current version	a month ago on 2023-11-09

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	572/1000 Why? Proof of Concept exploit, CVSS 9.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @babel/core

7.23.3 - 2023-11-09
v7.23.3 (2023-11-09)

🐛 Bug Fix
- babel-plugin-transform-typescript
  - #16071 Strip type-only TS namespaces (@ colinaaa)
- babel-generator
  - #16078 Fix indentation when generating comments with concise: true (@ liuxingbaoyu)
- babel-compat-data, babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-preset-env
  - #14295 Add a bugfix plugin for https://crbug.com/v8/12421 (@ nicolo-ribaudo)
- babel-plugin-transform-object-super
  - #15948 fix: super.x in a loop (@ liuxingbaoyu)
- babel-helper-module-transforms, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
  - #16015 fix: handle __proto__ exports name in CJS/AMD/UMD (@ magic-akari)
📝 Documentation
- #16044 docs: Update links in @ babel/eslint-parser README (@ aryehb)
🏠 Internal
- babel-core, babel-preset-env
  - #15988 Refactor handling of modules plugins in preset-env (@ nicolo-ribaudo)
🏃‍♀️ Performance
- babel-generator
  - #16061 perf: Improve @ babel/generator performance (@ liuxingbaoyu)
- babel-traverse
  - #16060 Avoid dynamic dispatch when calling wrapCheck (@ yepitschunked)
🔬 Output optimization
- babel-plugin-transform-computed-properties
  - #6652 Optimize computed properties output (byte-wise) (@ Andarist)
Committers: 9
- Babel Bot (@ babel-bot)
- Colin (@ colinaaa)
- Huáng Jùnliàng (@ JLHwung)
- Mateusz Burzyński (@ Andarist)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ aryehb
- @ liuxingbaoyu
- @ magic-akari
- @ yepitschunked
7.23.2 - 2023-10-12
v@babel/[email protected]
7.23.0 - 2023-09-25
v7.23.0 (2023-09-25)

Thanks @ lorenzoferre and @ RajShukla1 for your first PRs!

🚀 New Feature
- babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-import-source, babel-plugin-transform-dynamic-import
  - #15870 Support transforming import source for wasm (@ nicolo-ribaudo)
- babel-helper-module-transforms, babel-helpers, babel-plugin-proposal-import-defer, babel-plugin-syntax-import-defer, babel-plugin-transform-modules-commonjs, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
  - #15878 Implement import defer proposal transform support (@ nicolo-ribaudo)
- babel-generator, babel-parser, babel-types
  - #15845 Implement import defer parsing support (@ nicolo-ribaudo)
  - #15829 Add parsing support for the "source phase imports" proposal (@ nicolo-ribaudo)
- babel-generator, babel-helper-module-transforms, babel-parser, babel-plugin-transform-dynamic-import, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-traverse, babel-types
  - #15682 Add createImportExpressions parser option (@ JLHwung)
- babel-standalone
  - #15671 Pass through nonce to the transformed script element (@ JLHwung)
- babel-helper-function-name, babel-helper-member-expression-to-functions, babel-helpers, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-optional-chaining-assign, babel-plugin-syntax-optional-chaining-assign, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone, babel-types
  - #15751 Add support for optional chain in assignments (@ nicolo-ribaudo)
- babel-helpers, babel-plugin-proposal-decorators
  - #15895 Implement the "decorator metadata" proposal (@ nicolo-ribaudo)
- babel-traverse, babel-types
  - #15893 Add t.buildUndefinedNode (@ liuxingbaoyu)
- babel-preset-typescript
  - #15913 Add rewriteImportExtensions option to TS preset (@ nicolo-ribaudo)
- babel-parser
  - #15896 Allow TS tuples to have both labeled and unlabeled elements (@ yukukotani)
🐛 Bug Fix
- babel-plugin-transform-block-scoping
  - #15962 fix: transform-block-scoping captures the variables of the method in the loop (@ liuxingbaoyu)
💅 Polish
- babel-traverse
  - #15797 Expand evaluation of global built-ins in @ babel/traverse (@ lorenzoferre)
- babel-plugin-proposal-explicit-resource-management
  - #15985 Improve source maps for blocks with using declarations (@ nicolo-ribaudo)
🔬 Output optimization
- babel-core, babel-helper-module-transforms, babel-plugin-transform-async-to-generator, babel-plugin-transform-classes, babel-plugin-transform-dynamic-import, babel-plugin-transform-function-name, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-react-inline-elements, babel-plugin-transform-runtime, babel-plugin-transform-typescript, babel-preset-env
  - #15984 Inline exports.XXX = update in simple variable declarations (@ nicolo-ribaudo)
Committers: 7
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Lorenzo Ferretti (@ lorenzoferre)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Raj Pawan Shukla (@ RajShukla1)
- Yuku Kotani (@ yukukotani)
- @ liuxingbaoyu
7.22.20 - 2023-09-16
v7.22.20 (2023-09-16)

🏠 Internal
- babel-helper-validator-identifier
  - #15973 Remove special-casing of U+200C and U+200D (@ nicolo-ribaudo)
- babel-plugin-transform-dotall-regex
  - #15974 Update Unicode test fixtures (@ JLHwung)
↩️ Revert
- babel-helper-remap-async-to-generator, babel-helper-wrap-function, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-function-sent, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime, babel-preset-env
  - #15979 Revert "Improve output when wrapping functions" (@ jjonescz)
Committers: 3
- Huáng Jùnliàng (@ JLHwung)
- Jan Jones (@ jjonescz)
- Nicolò Ribaudo (@ nicolo-ribaudo)
7.22.19 - 2023-09-14
v7.22.19 (2023-09-14)

Re-published 7.22.18, due to a releasing error.
7.22.18 - 2023-09-14
7.22.17 - 2023-09-08
7.22.15 - 2023-09-04
7.22.11 - 2023-08-24
7.22.10 - 2023-08-07
7.22.9 - 2023-07-12
7.22.8 - 2023-07-06
7.22.7 - 2023-07-06
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.1 - 2023-05-26
7.22.0 - 2023-05-26
7.21.8 - 2023-05-02
7.21.5 - 2023-04-28
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.3 - 2023-03-14
7.21.0 - 2023-02-20
7.20.12 - 2023-01-04
7.20.7 - 2022-12-22
7.20.5 - 2022-11-28
7.20.2 - 2022-11-04
7.19.6 - 2022-10-20
7.19.3 - 2022-09-27
7.19.1 - 2022-09-14
7.19.0 - 2022-09-05
7.18.13 - 2022-08-22
7.18.10 - 2022-08-01
7.18.9 - 2022-07-18
7.18.6 - 2022-06-27
7.18.5 - 2022-06-13
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.10 - 2022-04-29

from @babel/core GitHub release notes

Package name: @babel/plugin-proposal-class-properties

7.18.6 - 2022-06-27
7.17.12 - 2022-05-16
7.16.7 - 2021-12-31

from @babel/plugin-proposal-class-properties GitHub release notes

Package name: @babel/plugin-transform-runtime

7.23.3 - 2023-11-09
v7.23.3 (2023-11-09)

🐛 Bug Fix
- babel-plugin-transform-typescript
  - #16071 Strip type-only TS namespaces (@ colinaaa)
- babel-generator
  - #16078 Fix indentation when generating comments with concise: true (@ liuxingbaoyu)
- babel-compat-data, babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-preset-env
  - #14295 Add a bugfix plugin for https://crbug.com/v8/12421 (@ nicolo-ribaudo)
- babel-plugin-transform-object-super
  - #15948 fix: super.x in a loop (@ liuxingbaoyu)
- babel-helper-module-transforms, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
  - #16015 fix: handle __proto__ exports name in CJS/AMD/UMD (@ magic-akari)
📝 Documentation
- #16044 docs: Update links in @ babel/eslint-parser README (@ aryehb)
🏠 Internal
- babel-core, babel-preset-env
  - #15988 Refactor handling of modules plugins in preset-env (@ nicolo-ribaudo)
🏃‍♀️ Performance
- babel-generator
  - #16061 perf: Improve @ babel/generator performance (@ liuxingbaoyu)
- babel-traverse
  - #16060 Avoid dynamic dispatch when calling wrapCheck (@ yepitschunked)
🔬 Output optimization
- babel-plugin-transform-computed-properties
  - #6652 Optimize computed properties output (byte-wise) (@ Andarist)
Committers: 9
- Babel Bot (@ babel-bot)
- Colin (@ colinaaa)
- Huáng Jùnliàng (@ JLHwung)
- Mateusz Burzyński (@ Andarist)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ aryehb
- @ liuxingbaoyu
- @ magic-akari
- @ yepitschunked
7.23.2 - 2023-10-11
v@babel/[email protected]
7.22.15 - 2023-09-04
7.22.10 - 2023-08-07
7.22.9 - 2023-07-12
7.22.7 - 2023-07-06
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.4 - 2023-05-29
7.22.2 - 2023-05-26
7.22.0 - 2023-05-26
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.0 - 2023-02-20
7.19.6 - 2022-10-20
7.19.1 - 2022-09-14
7.18.10 - 2022-08-01
7.18.9 - 2022-07-18
7.18.6 - 2022-06-27
7.18.5 - 2022-06-13
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.10 - 2022-04-29

from @babel/plugin-transform-runtime GitHub release notes

Package name: @babel/preset-flow

7.23.3 - 2023-11-09
v7.23.3 (2023-11-09)

🐛 Bug Fix
- babel-plugin-transform-typescript
  - #16071 Strip type-only TS namespaces (@ colinaaa)
- babel-generator
  - #16078 Fix indentation when generating comments with concise: true (@ liuxingbaoyu)
- babel-compat-data, babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-preset-env
  - #14295 Add a bugfix plugin for https://crbug.com/v8/12421 (@ nicolo-ribaudo)
- babel-plugin-transform-object-super
  - #15948 fix: super.x in a loop (@ liuxingbaoyu)
- babel-helper-module-transforms, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
  - #16015 fix: handle __proto__ exports name in CJS/AMD/UMD (@ magic-akari)
📝 Documentation
- #16044 docs: Update links in @ babel/eslint-parser README (@ aryehb)
🏠 Internal
- babel-core, babel-preset-env
  - #15988 Refactor handling of modules plugins in preset-env (@ nicolo-ribaudo)
🏃‍♀️ Performance
- babel-generator
  - #16061 perf: Improve @ babel/generator performance (@ liuxingbaoyu)
- babel-traverse
  - #16060 Avoid dynamic dispatch when calling wrapCheck (@ yepitschunked)
🔬 Output optimization
- babel-plugin-transform-computed-properties
  - #6652 Optimize computed properties output (byte-wise) (@ Andarist)
Committers: 9
- Babel Bot (@ babel-bot)
- Colin (@ colinaaa)
- Huáng Jùnliàng (@ JLHwung)
- Mateusz Burzyński (@ Andarist)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ aryehb
- @ liuxingbaoyu
- @ magic-akari
- @ yepitschunked
7.22.15 - 2023-09-04
7.22.5 - 2023-06-08
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.18.6 - 2022-06-27
7.17.12 - 2022-05-16
7.16.7 - 2021-12-31

from @babel/preset-flow GitHub release notes

Package name: @babel/preset-react

7.23.3 - 2023-11-09
Read more
7.22.15 - 2023-09-04
7.22.5 - 2023-06-08
7.22.3 - 2023-05-27
7.22.0 - 2023-05-26
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.18.6 - 2022-06-27
7.17.12 - 2022-05-16
7.16.7 - 2021-12-31

from @babel/preset-react GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - @babel/core from 7.17.10 to 7.23.3. See this package in npm: https://www.npmjs.com/package/@babel/core - @babel/plugin-proposal-class-properties from 7.16.7 to 7.18.6. See this package in npm: https://www.npmjs.com/package/@babel/plugin-proposal-class-properties - @babel/plugin-transform-runtime from 7.17.10 to 7.23.3. See this package in npm: https://www.npmjs.com/package/@babel/plugin-transform-runtime - @babel/preset-flow from 7.16.7 to 7.23.3. See this package in npm: https://www.npmjs.com/package/@babel/preset-flow - @babel/preset-react from 7.16.7 to 7.23.3. See this package in npm: https://www.npmjs.com/package/@babel/preset-react See this project in Snyk: https://app.snyk.io/org/expensify/project/35c87b83-0578-438a-9ce5-96d21d712614?utm_source=github&utm_medium=referral&page=upgrade-pr

…5ed273ee1a112c31851e2cbe80' into snyk-upgrade-7f189d5ed273ee1a112c31851e2cbe80

The merge-base changed after approval.

mjasikowski · 2024-10-07T17:59:29Z

@tgolen not sure why my review is not sufficient here, so passing the ball to you

The merge-base changed after approval.

tgolen · 2024-10-07T19:02:09Z

I think your review is fine as long as you tested the build out to ensure all the transpiling is still working. Did you confirm that it still works?

mjasikowski · 2024-10-07T20:32:04Z

Yup, I did, it's working fine.

The merge-base changed after approval.

tgolen · 2024-10-08T15:21:52Z

Approved reviews are getting auto-rejected on this one too.

snyk-bot and others added 3 commits December 9, 2023 14:17

Merge remote-tracking branch 'refs/remotes/origin/snyk-upgrade-7f189d…

e030a93

…5ed273ee1a112c31851e2cbe80' into snyk-upgrade-7f189d5ed273ee1a112c31851e2cbe80

Regenerated package-lock.json

ca6901c

mjasikowski self-assigned this Oct 7, 2024

mjasikowski previously approved these changes Oct 7, 2024

View reviewed changes

mjasikowski approved these changes Oct 7, 2024

View reviewed changes

mjasikowski requested a review from tgolen October 7, 2024 17:58

mjasikowski removed their assignment Oct 7, 2024

mjasikowski previously approved these changes Oct 7, 2024

View reviewed changes

mjasikowski self-assigned this Oct 7, 2024

mjasikowski previously approved these changes Oct 7, 2024

View reviewed changes

tgolen previously approved these changes Oct 8, 2024

View reviewed changes

mjasikowski closed this Oct 8, 2024

mjasikowski reopened this Oct 8, 2024

mjasikowski approved these changes Oct 8, 2024

View reviewed changes

mjasikowski merged commit e9c449e into main Oct 9, 2024
3 checks passed

mjasikowski deleted the snyk-upgrade-7f189d5ed273ee1a112c31851e2cbe80 branch October 9, 2024 10:39

[Snyk] Upgrade: @babel/core, @babel/plugin-proposal-class-properties, @babel/plugin-transform-runtime, @babel/preset-flow, @babel/preset-react #177

[Snyk] Upgrade: @babel/core, @babel/plugin-proposal-class-properties, @babel/plugin-transform-runtime, @babel/preset-flow, @babel/preset-react #177

Conversation

MelvinBot commented Dec 9, 2023

Snyk has created this PR to upgrade multiple dependencies.

v7.23.3 (2023-11-09)

🐛 Bug Fix

📝 Documentation

🏠 Internal

🏃‍♀️ Performance

🔬 Output optimization

Committers: 9

v7.23.0 (2023-09-25)

🚀 New Feature

🐛 Bug Fix

💅 Polish

🔬 Output optimization

Committers: 7

v7.22.20 (2023-09-16)

🏠 Internal

↩️ Revert

Committers: 3

v7.22.19 (2023-09-14)

v7.23.3 (2023-11-09)

🐛 Bug Fix

📝 Documentation

🏠 Internal

🏃‍♀️ Performance

🔬 Output optimization

Committers: 9

v7.23.3 (2023-11-09)

🐛 Bug Fix

📝 Documentation

🏠 Internal

🏃‍♀️ Performance

🔬 Output optimization

Committers: 9

mjasikowski commented Oct 7, 2024

tgolen commented Oct 7, 2024

mjasikowski commented Oct 7, 2024

tgolen commented Oct 8, 2024