[Snyk] Upgrade @babel/parser from 7.1.3 to 7.25.7 #10

nerds-github · 2024-10-24T02:04:10Z

Snyk has created this PR to upgrade @babel/parser from 7.1.3 to 7.25.7.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 173 versions ahead of your current version.
The recommended version was released on 21 days ago.

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	696	Proof of Concept
Prototype Pollution SNYK-JS-UNSETVALUE-2400660	696	No Known Exploit
Prototype Pollution SNYK-JS-AJV-584908	696	No Known Exploit
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	696	Proof of Concept
Uncontrolled resource consumption SNYK-JS-BRACES-6838727	696	Proof of Concept
Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	696	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HAWK-2808852	696	No Known Exploit
Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	696	No Known Exploit
Prototype Poisoning SNYK-JS-QS-3153490	696	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	696	Proof of Concept
Authentication Bypass SNYK-JS-HAWK-6969142	696	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-7925106	696	Proof of Concept
Insecure Randomness npm:cryptiles:20180710	696	No Known Exploit

Release notes

Package name: @babel/parser

7.25.7 - 2024-10-02
v7.25.7 (2024-10-02)

Thanks @ DylanPiercey and @ YuHyeonWook for your first PRs!

🐛 Bug Fix
- babel-helper-validator-identifier
  - #16825 fix: update identifier to unicode 16 (@ JLHwung)
- babel-traverse
  - #16814 fix: issue with node path keys updated on unrelated paths (@ DylanPiercey)
- babel-plugin-transform-classes
  - #16797 Use an inclusion rather than exclusion list for super() check (@ nicolo-ribaudo)
- babel-generator
  - #16788 Fix printing of TS infer in compact mode (@ nicolo-ribaudo)
  - #16785 Print TS type annotations for destructuring in assignment pattern (@ nicolo-ribaudo)
  - #16778 Respect [no LineTerminator here] after nodes (@ nicolo-ribaudo)
💅 Polish
- babel-types
  - #16852 Add deprecated JSDOC for fields (@ liuxingbaoyu)
🏠 Internal
- babel-core
  - #16820 Allow sync loading of ESM when --experimental-require-module (@ nicolo-ribaudo)
- babel-helper-compilation-targets, babel-helper-plugin-utils, babel-preset-env
  - #16858 Add browserslist config to external dependency (@ JLHwung)
- babel-plugin-proposal-destructuring-private, babel-plugin-syntax-decimal, babel-plugin-syntax-import-reflection, babel-standalone
  - #16809 Archive syntax-import-reflection and syntax-decimal (@ nicolo-ribaudo)
- babel-generator
  - #16779 Simplify logic for [no LineTerminator here] before nodes (@ nicolo-ribaudo)
🏃‍♀️ Performance
- babel-plugin-transform-typescript
  - #16875 perf: Avoid extra cloning of namespaces (@ liuxingbaoyu)
- babel-types
  - #16842 perf: Improve @ babel/types builders (@ liuxingbaoyu)
  - #16828 Only access BABEL_TYPES_8_BREAKING at startup (@ nicolo-ribaudo)
Committers: 8
- Babel Bot (@ babel-bot)
- Dylan Piercey (@ DylanPiercey)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
- coderaiser (@ coderaiser)
- fisker Cheung (@ fisker)
- hwook (@ YuHyeonWook)
7.25.6 - 2024-08-29
v7.25.6 (2024-08-29)

Thanks @ j4k0xb for your first PR!

🐛 Bug Fix
- babel-generator
  - #16783 Properly print inner comments in TS array types (@ nicolo-ribaudo)
  - #16775 fix: jsx whitespace is not properly preserved when retainLines (@ liuxingbaoyu)
- babel-traverse
  - #16727 fix: path.getAssignmentIdentifiers may be undefined (@ liuxingbaoyu)
- babel-parser
  - #16761 fix: improve static canFollowModifier checks (@ JLHwung)
- babel-helpers, babel-plugin-transform-optional-chaining, babel-runtime-corejs3
  - #16769 Only wrap functions in superPropertyGet helper (@ nicolo-ribaudo)
💅 Polish
- babel-generator, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx, babel-plugin-transform-react-pure-annotations, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
  - #16780 Do not enforce printing space between ( and comments (@ nicolo-ribaudo)
- babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes
  - #16781 Don't throw when enabling both syntax-import-{assertions,attributes} (@ nicolo-ribaudo)
- babel-generator
  - #16782 TS union/intersection nested in union does not need parens (@ nicolo-ribaudo)
🏠 Internal
- babel-generator
  - #16777 Remove unused parent params in the generator (@ nicolo-ribaudo)
Committers: 5
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ j4k0xb
- @ liuxingbaoyu
7.25.4 - 2024-08-22
v7.25.4 (2024-08-22)

🐛 Bug Fix
- babel-traverse
  - #16756 fix: Skip computed key when renaming (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16755 fix: Decorator 2018-09 may throw an exception (@ liuxingbaoyu)
- babel-types
  - #16710 Visit AST fields nodes according to their syntactical order (@ nicolo-ribaudo)
- babel-generator
  - #16709 Print semicolon after TS export namespace as A (@ nicolo-ribaudo)
💅 Polish
- babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-runtime-corejs2, babel-runtime, babel-traverse
  - #16722 Avoid unnecessary parens around sequence expressions (@ nicolo-ribaudo)
- babel-generator, babel-plugin-transform-class-properties
  - #16714 Avoid unnecessary parens around exported arrow functions (@ nicolo-ribaudo)
- babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-object-rest-spread
  - #16712 Avoid printing unnecessary parens around object destructuring (@ nicolo-ribaudo)
🔬 Output optimization
- babel-generator
  - #16740 Avoid extra spaces between comments/regexps in compact mode (@ nicolo-ribaudo)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.25.3 - 2024-07-31
v7.25.3 (2024-07-31)

🐛 Bug Fix
- babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-traverse
  - #16699 Avoid validating visitors produced by traverse.visitors.merge (@ nicolo-ribaudo)
🏠 Internal
- babel-parser
  - #16688 Add @ babel/types as a dependency of @ babel/parser (@ nicolo-ribaudo)
Committers: 2
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
7.25.0 - 2024-07-26
v7.25.0 (2024-07-26)

Thanks @ davidtaylorhq and @ slatereax for your first PR!

You can find the release blog post with some highlights at https://babeljs.io/blog/2024/07/26/7.25.0.

👓 Spec Compliance
- babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3
  - #16537 await using normative updates (@ JLHwung)
- babel-plugin-transform-typescript
  - #16602 Ensure enum members syntactically determinable to be strings do not get reverse mappings (@ liuxingbaoyu)
🚀 New Feature
- babel-helper-create-class-features-plugin, babel-helper-function-name, babel-helper-plugin-utils, babel-helper-wrap-function, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-preset-env, babel-traverse, babel-types
  - #16658 Move ensureFunctionName to NodePath.prototype (@ nicolo-ribaudo)
- babel-helper-hoist-variables, babel-helper-plugin-utils, babel-plugin-proposal-async-do-expressions, babel-plugin-transform-modules-systemjs, babel-traverse
  - #16644 Move hoistVariables to Scope.prototype (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-split-export-declaration, babel-plugin-transform-classes, babel-traverse, babel-types
  - #16645 Move splitExportDeclaration to NodePath.prototype (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helper-environment-visitor, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-remap-async-to-generator, babel-helper-replace-supers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-transform-async-generator-functions, babel-plugin-transform-classes, babel-traverse
  - #16649 Move environment-visitor helper into @ babel/traverse (@ nicolo-ribaudo)
- babel-core, babel-parser
  - #16480 Expose wether a module has TLA or not as .extra.async (@ nicolo-ribaudo)
- babel-compat-data, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-preset-env
  - #16569 Introduce bugfix-safari-class-field-initializer-scope (@ davidtaylorhq)
- babel-plugin-transform-block-scoping, babel-traverse, babel-types
  - #16551 Add NodePath#getAssignmentIdentifiers (@ JLHwung)
- babel-helper-import-to-platform-api, babel-plugin-proposal-json-modules
  - #16579 Add uncheckedRequire option for JSON imports to CJS (@ nicolo-ribaudo)
- babel-helper-transform-fixture-test-runner, babel-node
  - #16642 Allow using custom config in babel-node --eval (@ slatereax)
- babel-compat-data, babel-helper-create-regexp-features-plugin, babel-plugin-proposal-duplicate-named-capturing-groups-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-preset-env, babel-standalone
  - #16445 Add duplicate-named-capturing-groups-regex to preset-env (@ JLHwung)
🐛 Bug Fix
- babel-generator
  - #16678 Print parens around as expressions on the LHS (@ nicolo-ribaudo)
- babel-template, babel-types
  - #15286 fix: Props are lost when the template replaces the node (@ liuxingbaoyu)
🏠 Internal
- Other
  - #16674 bump gulp to 5 (@ JLHwung)
- babel-generator
  - #16651 Simplify the printing logic for ( before ambiguous tokens (@ nicolo-ribaudo)
- babel-helper-function-name, babel-plugin-transform-arrow-functions, babel-plugin-transform-function-name, babel-preset-env, babel-traverse
  - #16652 Simplify helper-function-name logic (@ nicolo-ribaudo)
🏃‍♀️ Performance
- babel-parser, babel-plugin-proposal-pipeline-operator
  - #16461 Some minor parser performance improvements for ts (@ liuxingbaoyu)
🔬 Output optimization
- babel-plugin-transform-classes
  - #16670 Reduce redundant assertThisInitialized (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-object-super, babel-plugin-transform-private-methods, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16374 Improve super.x output (@ liuxingbaoyu)
- babel-plugin-transform-class-properties, babel-plugin-transform-classes
  - #16656 Simplify output for anonymous classes with no methods (@ nicolo-ribaudo)
Committers: 6
- Artem (@ slatereax)
- Babel Bot (@ babel-bot)
- David Taylor (@ davidtaylorhq)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.24.8 - 2024-07-11
7.24.7 - 2024-06-05
7.24.6 - 2024-05-24
7.24.5 - 2024-04-29
7.24.4 - 2024-04-03
7.24.1 - 2024-03-19
7.24.0 - 2024-02-28
7.23.9 - 2024-01-25
7.23.6 - 2023-12-11
7.23.5 - 2023-11-29
7.23.4 - 2023-11-20
7.23.3 - 2023-11-09
7.23.0 - 2023-09-25
7.22.16 - 2023-09-06
7.22.15 - 2023-09-04
7.22.14 - 2023-08-30
7.22.13 - 2023-08-28
7.22.11 - 2023-08-24
7.22.10 - 2023-08-07
7.22.7 - 2023-07-06
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.4 - 2023-05-29
7.22.3 - 2023-05-27
7.22.0 - 2023-05-26
7.21.9 - 2023-05-22
7.21.8 - 2023-05-02
7.21.5 - 2023-04-28
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.3 - 2023-03-14
7.21.2 - 2023-02-23
7.21.1 - 2023-02-20
7.21.0 - 2023-02-20
7.20.15 - 2023-02-02
7.20.13 - 2023-01-21
7.20.7 - 2022-12-22
7.20.5 - 2022-11-28
7.20.3 - 2022-11-07
7.20.2 - 2022-11-04
7.20.1 - 2022-11-01
7.20.0 - 2022-10-27
7.19.6 - 2022-10-20
7.19.4 - 2022-10-10
7.19.3 - 2022-09-27
7.19.1 - 2022-09-14
7.19.0 - 2022-09-05
7.18.13 - 2022-08-22
7.18.11 - 2022-08-04
7.18.10 - 2022-08-01
7.18.9 - 2022-07-18
7.18.8 - 2022-07-08
7.18.6 - 2022-06-27
7.18.5 - 2022-06-13
7.18.4 - 2022-05-29
7.18.3 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.10 - 2022-04-29
7.17.9 - 2022-04-06
7.17.8 - 2022-03-18
7.17.7 - 2022-03-14
7.17.3 - 2022-02-15
7.17.0 - 2022-02-02
7.16.12 - 2022-01-22
7.16.10 - 2022-01-19
7.16.8 - 2022-01-10
7.16.7 - 2021-12-31
7.16.6 - 2021-12-14
7.16.5 - 2021-12-13
7.16.4 - 2021-11-16
7.16.3 - 2021-11-09
7.16.2 - 2021-11-01
7.16.0 - 2021-10-29
7.15.8 - 2021-10-06
7.15.7 - 2021-09-17
7.15.6 - 2021-09-09
7.15.5 - 2021-09-04
7.15.4 - 2021-09-02
7.15.3 - 2021-08-11
7.15.2 - 2021-08-08
7.15.0 - 2021-08-04
7.14.9 - 2021-08-01
7.14.8 - 2021-07-20
7.14.7 - 2021-06-21
7.14.6 - 2021-06-14
7.14.5 - 2021-06-09
7.14.4 - 2021-05-28
7.14.3 - 2021-05-17
7.14.2 - 2021-05-12
7.14.1 - 2021-05-04
7.14.0 - 2021-04-29
7.13.16 - 2021-04-20
7.13.15 - 2021-04-08
7.13.13 - 2021-03-26
7.13.12 - 2021-03-22
7.13.11 - 2021-03-15
7.13.10 - 2021-03-08
7.13.9 - 2021-03-01
7.13.4 - 2021-02-23
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.16 - 2021-02-11
7.12.15 - 2021-02-04
7.12.14 - 2021-02-03
7.12.13 - 2021-02-03
7.12.11 - 2020-12-15
7.12.10 - 2020-12-09
7.12.7 - 2020-11-20
7.12.5 - 2020-11-03
7.12.3 - 2020-10-16
7.12.2 - 2020-10-16
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.5 - 2020-08-31
7.11.4 - 2020-08-20
7.11.3 - 2020-08-08
7.11.2 - 2020-08-05
7.11.1 - 2020-08-04
7.11.0 - 2020-07-30
7.10.5 - 2020-07-14
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.2 - 2020-05-30
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.6 - 2020-04-29
7.9.4 - 2020-03-24
7.9.3 - 2020-03-22
7.9.2 - 2020-03-21
7.9.0 - 2020-03-20
7.8.8 - 2020-03-12
7.8.7 - 2020-03-05
7.8.6 - 2020-02-27
7.8.4 - 2020-01-30
7.8.3 - 2020-01-13
7.8.0 - 2020-01-12
7.7.7 - 2019-12-19
7.7.5 - 2019-12-06
7.7.4 - 2019-11-22
7.7.3 - 2019-11-08
7.7.2 - 2019-11-06
7.7.0 - 2019-11-05
7.6.4 - 2019-10-10
7.6.3 - 2019-10-08
7.6.2 - 2019-09-23
7.6.0 - 2019-09-06
7.5.5 - 2019-07-17
7.5.0 - 2019-07-04
7.4.5 - 2019-05-21
7.4.4 - 2019-04-26
7.4.3 - 2019-04-02
7.4.2 - 2019-03-21
7.4.0 - 2019-03-19
7.3.4 - 2019-02-25
7.3.3 - 2019-02-15
7.3.2 - 2019-02-04
7.3.1 - 2019-01-22
7.3.0 - 2019-01-21
7.2.3 - 2018-12-20
7.2.2 - 2018-12-15
7.2.0 - 2018-12-03
7.1.6 - 2018-11-13
7.1.5 - 2018-11-06
7.1.3 - 2018-10-11

from @babel/parser GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @babel/parser from 7.1.3 to 7.25.7. See this package in npm: @babel/parser See this project in Snyk: https://app.snyk.io/org/nerds-github/project/5c08c7f3-e081-4b45-bb54-aed4a1afcddf?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade @babel/parser from 7.1.3 to 7.25.7 #10

[Snyk] Upgrade @babel/parser from 7.1.3 to 7.25.7 #10

nerds-github commented Oct 24, 2024

v7.25.7 (2024-10-02)

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

Committers: 8

v7.25.6 (2024-08-29)

🐛 Bug Fix

💅 Polish

🏠 Internal

Committers: 5

v7.25.4 (2024-08-22)

🐛 Bug Fix

💅 Polish

🔬 Output optimization

Committers: 4

v7.25.3 (2024-07-31)

🐛 Bug Fix

🏠 Internal

Committers: 2

v7.25.0 (2024-07-26)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

🔬 Output optimization

Committers: 6

[Snyk] Upgrade @babel/parser from 7.1.3 to 7.25.7 #10

Are you sure you want to change the base?

[Snyk] Upgrade @babel/parser from 7.1.3 to 7.25.7 #10

Conversation

nerds-github commented Oct 24, 2024

Snyk has created this PR to upgrade @babel/parser from 7.1.3 to 7.25.7.

Issues fixed by the recommended upgrade:

v7.25.7 (2024-10-02)

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

Committers: 8

v7.25.6 (2024-08-29)

🐛 Bug Fix

💅 Polish

🏠 Internal

Committers: 5

v7.25.4 (2024-08-22)

🐛 Bug Fix

💅 Polish

🔬 Output optimization

Committers: 4

v7.25.3 (2024-07-31)

🐛 Bug Fix

🏠 Internal

Committers: 2

v7.25.0 (2024-07-26)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

🔬 Output optimization

Committers: 6