[Snyk] Upgrade: @babel/preset-env, @babel/preset-react #229

Loonz206 · 2023-06-24T02:21:28Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on
@babel/preset-env from 7.14.2 to 7.22.4	39 versions ahead of your current version	25 days ago on 2023-05-29
@babel/preset-react from 7.13.13 to 7.22.3	13 versions ahead of your current version	a month ago on 2023-05-27

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Prototype Pollution SNYK-JS-LOADERUTILS-3043105	375/1000 Why? CVSS 7.5	No Known Exploit
Prototype Poisoning SNYK-JS-QS-3153490	375/1000 Why? CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-LOADERUTILS-3043105	375/1000 Why? CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-MONGOOSE-2961688	375/1000 Why? CVSS 7.5	Proof of Concept
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	375/1000 Why? CVSS 7.5	No Known Exploit
Denial of Service (DoS) SNYK-JS-TRIMNEWLINES-1298042	375/1000 Why? CVSS 7.5	No Known Exploit
Sandbox Bypass SNYK-JS-WEBPACK-3358798	375/1000 Why? CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	375/1000 Why? CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	375/1000 Why? CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	375/1000 Why? CVSS 7.5	No Known Exploit
Session Fixation SNYK-JS-PASSPORT-2840631	375/1000 Why? CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-CONVENTIONALCOMMITSPARSER-1766960	375/1000 Why? CVSS 7.5	No Known Exploit
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	375/1000 Why? CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	375/1000 Why? CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	375/1000 Why? CVSS 7.5	No Known Exploit
Open Redirect SNYK-JS-GOT-2932019	375/1000 Why? CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-HTTPCACHESEMANTICS-3248783	375/1000 Why? CVSS 7.5	Proof of Concept
Information Exposure SNYK-JS-NANOID-2332193	375/1000 Why? CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	375/1000 Why? CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TRIMOFFNEWLINES-1296850	375/1000 Why? CVSS 7.5	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	375/1000 Why? CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-2429795	375/1000 Why? CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @babel/preset-env

7.22.4 - 2023-05-29
v7.22.4 (2023-05-29)

🐛 Bug Fix
- babel-traverse
  - #15649 Set shorthand: false when renaming an identifier inside an object property (@ coderaiser)
🏠 Internal
- babel-types
  - #15666 Add missing attributes/assertions to VISITOR_KEYS (@ nicolo-ribaudo)
- babel-parser
  - #15667 Mark assert attributes with extra.deprecatedAssertSyntax (@ nicolo-ribaudo)
Committers: 3
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- coderaiser (@ coderaiser)
7.22.2 - 2023-05-26
v7.22.2 (2023-05-26)

🐛 Bug Fix
- babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2
  - #15660 Fix importing symbol polyfill in @ babel/runtime-corejs2 (@ nicolo-ribaudo)
Committers: 1
- Nicolò Ribaudo (@ nicolo-ribaudo)
7.22.1 - 2023-05-26
v7.22.1 (2023-05-26)

🐛 Bug Fix
- babel-preset-env
  - #15658 Workaround for broken babel-preset-react-app (@ nicolo-ribaudo)
Committers: 2
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.22.0 - 2023-05-26
v7.22.0 (2023-05-26)

🚀 New Feature
- babel-parser, babel-plugin-transform-typescript
  - #15497 [ts] Support import ... = and export = in scripts (@ nicolo-ribaudo)
- babel-compat-data, babel-core, babel-plugin-proposal-unicode-sets-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-standalone
  - #15636 Add unicode-sets-regex transform to preset-env (@ JLHwung)
- babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-runtime, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
  - #15633 Implement transform support for using declarations (@ nicolo-ribaudo)
- babel-plugin-proposal-import-attributes-to-assertions
  - #15620 Create @ babel/plugin-proposal-import-attributes-to-assertions (@ nicolo-ribaudo)
- babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
  - #15536 Add support for the updated import attributes proposal (@ nicolo-ribaudo)
- babel-generator, babel-parser, babel-traverse, babel-types
  - #15520 Parse await using declarations (@ JLHwung)
- babel-core, babel-helper-create-regexp-features-plugin, babel-parser
  - #15638 Enable regexp unicode sets parsing by default (@ JLHwung)
- babel-helpers, babel-plugin-proposal-decorators, babel-plugin-syntax-decorators, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #15570 Add decorators version 2023-05 (@ nicolo-ribaudo)
💅 Polish
- babel-plugin-transform-react-constant-elements, babel-plugin-transform-react-jsx, babel-traverse, babel-types
  - #15549 Improve type definitions for validators (@ liuxingbaoyu)
🏠 Internal
- babel-parser
  - #15630 Unify parsing of import/export modifiers (type/typeof/module) (@ nicolo-ribaudo)
- babel-compat-data, babel-helper-transform-fixture-test-runner, babel-node, babel-plugin-proposal-decorators, babel-plugin-proposal-duplicate-named-capturing-groups-regex, babel-plugin-transform-async-generator-functions, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  - #15531 Allow polyfill providers to specify custom @ babel/runtime pkg (@ nicolo-ribaudo)
- babel-core, babel-plugin-proposal-async-generator-functions, babel-plugin-proposal-class-properties, babel-plugin-proposal-class-static-block, babel-plugin-proposal-decorators, babel-plugin-proposal-dynamic-import, babel-plugin-proposal-export-namespace-from, babel-plugin-proposal-function-sent, babel-plugin-proposal-json-strings, babel-plugin-proposal-logical-assignment-operators, babel-plugin-proposal-nullish-coalescing-operator, babel-plugin-proposal-numeric-separator, babel-plugin-proposal-object-rest-spread, babel-plugin-proposal-optional-catch-binding, babel-plugin-proposal-optional-chaining, babel-plugin-proposal-pipeline-operator, babel-plugin-proposal-private-methods, babel-plugin-proposal-private-property-in-object, babel-plugin-proposal-unicode-property-regex, babel-preset-env, babel-standalone
  - #15614 Rename -proposal-s that became standard to -transform- (@ nicolo-ribaudo)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.21.5 - 2023-04-28
v7.21.5 (2023-04-28)

👓 Spec Compliance
- babel-generator, babel-parser, babel-types
  - #15539 fix: Remove mixins and implements for DeclareInterface and InterfaceDeclaration (@ liuxingbaoyu)
🐛 Bug Fix
- babel-core, babel-generator, babel-plugin-transform-modules-commonjs, babel-plugin-transform-react-jsx
  - #15515 fix: ) position with createParenthesizedExpressions (@ liuxingbaoyu)
- babel-preset-env
  - #15580 Add syntax import meta to preset env (@ JLHwung)
💅 Polish
- babel-types
  - #15546 Improve the layout of generated validators (@ liuxingbaoyu)
- babel-core
  - #15535 Use lt instead of lte to check TS version for .cts config (@ nicolo-ribaudo)
🏠 Internal
- babel-core
  - #15575 Use synchronous import.meta.resolve (@ nicolo-ribaudo)
- babel-helper-fixtures, babel-preset-typescript
  - #15568 Handle .overrides and .env when resolving plugins/presets from fixture options (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-helper-create-regexp-features-plugin
  - #15548 Use semver package to compare versions (@ nicolo-ribaudo)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.20.2 - 2022-11-04
7.19.4 - 2022-10-10
7.19.3 - 2022-09-27
7.19.1 - 2022-09-14
7.19.0 - 2022-09-05
7.18.10 - 2022-08-01
7.18.9 - 2022-07-18
7.18.6 - 2022-06-27
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.10 - 2022-04-29
7.16.11 - 2022-01-20
7.16.10 - 2022-01-19
7.16.8 - 2022-01-10
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.4 - 2021-11-16
7.16.0 - 2021-10-29
7.15.8 - 2021-10-06
7.15.6 - 2021-09-09
7.15.4 - 2021-09-02
7.15.0 - 2021-08-04
7.14.9 - 2021-08-01
7.14.8 - 2021-07-20
7.14.7 - 2021-06-21
7.14.5 - 2021-06-09
7.14.4 - 2021-05-28
7.14.2 - 2021-05-12

from @babel/preset-env GitHub release notes

Package name: @babel/preset-react

7.22.3 - 2023-05-27
v7.22.3 (2023-05-27)
- Re-publish all the package published in 7.22.0 that hadn't been republished yet. We accidentally published them with a package.json file containing "type": "script" instead of "type": "commonjs" (#15664).
7.22.0 - 2023-05-26
v7.22.0 (2023-05-26)

🚀 New Feature
- babel-parser, babel-plugin-transform-typescript
  - #15497 [ts] Support import ... = and export = in scripts (@ nicolo-ribaudo)
- babel-compat-data, babel-core, babel-plugin-proposal-unicode-sets-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-standalone
  - #15636 Add unicode-sets-regex transform to preset-env (@ JLHwung)
- babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-runtime, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
  - #15633 Implement transform support for using declarations (@ nicolo-ribaudo)
- babel-plugin-proposal-import-attributes-to-assertions
  - #15620 Create @ babel/plugin-proposal-import-attributes-to-assertions (@ nicolo-ribaudo)
- babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
  - #15536 Add support for the updated import attributes proposal (@ nicolo-ribaudo)
- babel-generator, babel-parser, babel-traverse, babel-types
  - #15520 Parse await using declarations (@ JLHwung)
- babel-core, babel-helper-create-regexp-features-plugin, babel-parser
  - #15638 Enable regexp unicode sets parsing by default (@ JLHwung)
- babel-helpers, babel-plugin-proposal-decorators, babel-plugin-syntax-decorators, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #15570 Add decorators version 2023-05 (@ nicolo-ribaudo)
💅 Polish
- babel-plugin-transform-react-constant-elements, babel-plugin-transform-react-jsx, babel-traverse, babel-types
  - #15549 Improve type definitions for validators (@ liuxingbaoyu)
🏠 Internal
- babel-parser
  - #15630 Unify parsing of import/export modifiers (type/typeof/module) (@ nicolo-ribaudo)
- babel-compat-data, babel-helper-transform-fixture-test-runner, babel-node, babel-plugin-proposal-decorators, babel-plugin-proposal-duplicate-named-capturing-groups-regex, babel-plugin-transform-async-generator-functions, babel-plugin-transform-named-capturing-groups-regex, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  - #15531 Allow polyfill providers to specify custom @ babel/runtime pkg (@ nicolo-ribaudo)
- babel-core, babel-plugin-proposal-async-generator-functions, babel-plugin-proposal-class-properties, babel-plugin-proposal-class-static-block, babel-plugin-proposal-decorators, babel-plugin-proposal-dynamic-import, babel-plugin-proposal-export-namespace-from, babel-plugin-proposal-function-sent, babel-plugin-proposal-json-strings, babel-plugin-proposal-logical-assignment-operators, babel-plugin-proposal-nullish-coalescing-operator, babel-plugin-proposal-numeric-separator, babel-plugin-proposal-object-rest-spread, babel-plugin-proposal-optional-catch-binding, babel-plugin-proposal-optional-chaining, babel-plugin-proposal-pipeline-operator, babel-plugin-proposal-private-methods, babel-plugin-proposal-private-property-in-object, babel-plugin-proposal-unicode-property-regex, babel-preset-env, babel-standalone
  - #15614 Rename -proposal-s that became standard to -transform- (@ nicolo-ribaudo)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.18.6 - 2022-06-27
7.17.12 - 2022-05-16
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.0 - 2021-10-29
7.14.5 - 2021-06-09
7.13.13 - 2021-03-26

from @babel/preset-react GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - @babel/preset-env from 7.14.2 to 7.22.4. See this package in npm: https://www.npmjs.com/package/@babel/preset-env - @babel/preset-react from 7.13.13 to 7.22.3. See this package in npm: https://www.npmjs.com/package/@babel/preset-react See this project in Snyk: https://app.snyk.io/org/loonz206/project/e170a75b-6111-4781-ada4-5defdee12061?utm_source=github&utm_medium=referral&page=upgrade-pr

sonarcloud · 2023-06-24T02:21:49Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication

Loonz206 merged commit f743dfa into main Jul 5, 2023
3 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: @babel/preset-env, @babel/preset-react #229

[Snyk] Upgrade: @babel/preset-env, @babel/preset-react #229

Loonz206 commented Jun 24, 2023

v7.22.4 (2023-05-29)

🐛 Bug Fix

🏠 Internal

Committers: 3

v7.22.2 (2023-05-26)

🐛 Bug Fix

Committers: 1

v7.22.1 (2023-05-26)

🐛 Bug Fix

Committers: 2

v7.22.0 (2023-05-26)

🚀 New Feature

💅 Polish

🏠 Internal

Committers: 4

v7.21.5 (2023-04-28)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

Committers: 4

v7.22.3 (2023-05-27)

v7.22.0 (2023-05-26)

🚀 New Feature

💅 Polish

🏠 Internal

Committers: 4

sonarcloud bot commented Jun 24, 2023

[Snyk] Upgrade: @babel/preset-env, @babel/preset-react #229

[Snyk] Upgrade: @babel/preset-env, @babel/preset-react #229

Conversation

Loonz206 commented Jun 24, 2023

Snyk has created this PR to upgrade multiple dependencies.

v7.22.4 (2023-05-29)

🐛 Bug Fix

🏠 Internal

Committers: 3

v7.22.2 (2023-05-26)

🐛 Bug Fix

Committers: 1

v7.22.1 (2023-05-26)

🐛 Bug Fix

Committers: 2

v7.22.0 (2023-05-26)

🚀 New Feature

💅 Polish

🏠 Internal

Committers: 4

v7.21.5 (2023-04-28)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

🏠 Internal

Committers: 4

v7.22.3 (2023-05-27)

v7.22.0 (2023-05-26)

🚀 New Feature

💅 Polish

🏠 Internal

Committers: 4

sonarcloud bot commented Jun 24, 2023