Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade acorn from 4.0.13 to 8.12.1 #24

Open
wants to merge 1 commit into
base: mdl-1.x
Choose a base branch
from

Conversation

WontonSam
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade acorn from 4.0.13 to 8.12.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 79 versions ahead of your current version.

  • The recommended version was released on 22 days ago.

Release notes
Package name: acorn
  • 8.12.1 - 2024-07-03

    Bug fixes

    Fix a regression that caused Acorn to no longer run on Node versions <8.10.

  • 8.12.0 - 2024-06-14

    New features

    Support ES2025 duplicate capture group names in regular expressions.

    Bug fixes

    Include VariableDeclarator in the AnyNode type so that walker objects can refer to it without getting a type error.

    Properly raise a parse error for invalid for/of statements using async as binding name.

    Properly recognize "use strict" when preceded by a string with an escaped newline.

    Mark the Parser constructor as protected, not private, so plugins can extend it without type errors.

    Fix a bug where some invalid delete expressions were let through when the operand was parenthesized and preserveParens was enabled.

    Properly normalize line endings in raw strings of invalid template tokens.

    Properly track line numbers for escaped newlines in strings.

    Fix a bug that broke line number accounting after a template literal with invalid escape sequences.

  • 8.11.3 - 2023-12-29

    Bug fixes

    Add Function and Class to the AggregateType type, so that they can be used in walkers without raising a type error.

    Make sure onToken get an import keyword token when parsing import.meta.

    Fix a bug where .loc.start could be undefined for new.target meta nodes.

  • 8.11.2 - 2023-10-27

    Bug fixes

    Fix a bug that caused regular expressions after colon tokens to not be properly tokenized in some circumstances.

  • 8.11.1 - 2023-10-26

    Bug fixes

    Fix a regression where onToken would receive 'name' tokens for 'new' keyword tokens.

  • 8.11.0 - 2023-10-26

    Bug fixes

    Fix an issue where tokenizing (without parsing) an object literal with a property named class or function could, in some circumstance, put the tokenizer into an invalid state.

    Fix an issue where a slash after a call to a propery named the same as some keywords would be tokenized as a regular expression.

    New features

    Upgrade to Unicode 15.1.

    Use a set of new, much more precise, TypeScript types.

  • 8.10.0 - 2023-07-05

    New features

    Add a checkPrivateFields option that disables strict checking of private property use.

  • 8.9.0 - 2023-06-16

    Bug fixes

    Forbid dynamic import after new, even when part of a member expression.

    New features

    Add Unicode properties for ES2023.

    Add support for the v flag to regular expressions.

  • 8.8.2 - 2023-01-23

    Bug fixes

    Fix a bug that caused allowHashBang to be set to false when not provided, even with ecmaVersion >= 14.

    Fix an exception when passing no option object to parse or new Parser.

    Fix incorrect parse error on if (0) let\n[astral identifier char].

  • 8.8.1 - 2022-10-24

    Bug fixes

    Make type for Comment compatible with estree types.

  • 8.8.0 - 2022-07-21
  • 8.7.1 - 2022-04-26
  • 8.7.0 - 2021-12-27
  • 8.6.0 - 2021-11-18
  • 8.5.0 - 2021-09-06
  • 8.4.1 - 2021-06-24
  • 8.4.0 - 2021-06-11
  • 8.3.0 - 2021-05-31
  • 8.2.4 - 2021-05-04
  • 8.2.3 - 2021-05-04
  • 8.2.2 - 2021-04-29
  • 8.2.1 - 2021-04-24
  • 8.2.0 - 2021-04-24
  • 8.1.1 - 2021-04-12
  • 8.1.0 - 2021-03-09
  • 8.0.5 - 2021-01-25
  • 8.0.4 - 2020-10-05
  • 8.0.3 - 2020-10-02
  • 8.0.2 - 2020-09-30
  • 8.0.1 - 2020-08-12
  • 8.0.0 - 2020-08-12
  • 7.4.1 - 2020-10-05
  • 7.4.0 - 2020-08-03
  • 7.3.1 - 2020-06-11
  • 7.3.0 - 2020-06-11
  • 7.2.0 - 2020-05-09
  • 7.1.1 - 2020-03-01
  • 7.1.0 - 2019-09-24
  • 7.0.0 - 2019-08-13
  • 6.4.2 - 2020-10-05
  • 6.4.1 - 2020-03-09
  • 6.4.0 - 2019-11-26
  • 6.3.0 - 2019-08-12
  • 6.2.1 - 2019-07-20
  • 6.2.0 - 2019-07-04
  • 6.1.1 - 2019-02-27
  • 6.1.0 - 2019-02-08
  • 6.0.7 - 2019-02-04
  • 6.0.6 - 2019-01-30
  • 6.0.5 - 2019-01-02
  • 6.0.4 - 2018-11-05
  • 6.0.3 - 2018-11-04
  • 6.0.2 - 2018-09-26
  • 6.0.1 - 2018-09-14
  • 6.0.0 - 2018-09-14
  • 5.7.4 - 2020-03-09
  • 5.7.3 - 2018-09-10
  • 5.7.2 - 2018-08-24
  • 5.7.1 - 2018-06-15
  • 5.7.0 - 2018-06-15
  • 5.6.2 - 2018-06-05
  • 5.6.1 - 2018-06-01
  • 5.6.0 - 2018-05-31
  • 5.5.3 - 2018-03-08
  • 5.5.2 - 2018-03-08
  • 5.5.1 - 2018-03-06
  • 5.5.0 - 2018-02-27
  • 5.4.1 - 2018-02-02
  • 5.4.0 - 2018-02-01
  • 5.3.0 - 2017-12-28
  • 5.2.1 - 2017-10-29
  • 5.2.0 - 2017-10-29
  • 5.1.2 - 2017-09-04
  • 5.1.1 - 2017-07-06
  • 5.1.0 - 2017-07-05
  • 5.0.3 - 2017-04-01
  • 5.0.2 - 2017-03-30
  • 5.0.1 - 2017-03-30
  • 5.0.0 - 2017-03-28
  • 4.0.13 - 2017-05-24
from acorn GitHub release notes

Important

  • Warning: This PR contains a major version upgrade, and may be a breaking change.
  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade acorn from 4.0.13 to 8.12.1.

See this package in npm:
acorn

See this project in Snyk:
https://app.snyk.io/org/cachiman/project/29621f4e-2bf8-45d8-a8e6-0757494a59ae?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

google-cla bot commented Jul 25, 2024

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants