babel/babel (@babel/core)
### [`v7.22.8`](https://togithub.com/babel/babel/blob/HEAD/CHANGELOG.md#v7228-2023-07-06)
[Compare Source](https://togithub.com/babel/babel/compare/v7.22.7...v7.22.8)
##### :leftwards_arrow_with_hook: Revert
- `babel-core`, `babel-traverse`
- [#15754](https://togithub.com/babel/babel/pull/15754) Revert "Use `NodePath#hub` as part of the paths cache key" ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
### [`v7.22.7`](https://togithub.com/babel/babel/blob/HEAD/CHANGELOG.md#v7227-2023-07-06)
[Compare Source](https://togithub.com/babel/babel/compare/v7.22.6...v7.22.7)
##### :bug: Bug Fix
- `babel-generator`
- [#15719](https://togithub.com/babel/babel/pull/15719) fix: Avoid internally generating negative source maps columns ([@liuxingbaoyu](https://togithub.com/liuxingbaoyu))
- `babel-core`, `babel-traverse`
- [#15725](https://togithub.com/babel/babel/pull/15725) Use `NodePath#hub` as part of the paths cache key ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
- Other
- [#15747](https://togithub.com/babel/babel/pull/15747) fix: export `meta` from `eslint-parser/experimental-worker` ([@JLHwung](https://togithub.com/JLHwung))
##### :house: Internal
- `babel-core`, `babel-traverse`
- [#15702](https://togithub.com/babel/babel/pull/15702) Refactor visitors merging ([@nullableVoidPtr](https://togithub.com/nullableVoidPtr))
### [`v7.22.6`](https://togithub.com/babel/babel/blob/HEAD/CHANGELOG.md#v7226-2023-07-04)
[Compare Source](https://togithub.com/babel/babel/compare/v7.22.5...v7.22.6)
##### :bug: Bug Fix
- `babel-compat-data`, `babel-helper-compilation-targets`, `babel-preset-env`
- [#15727](https://togithub.com/babel/babel/pull/15727) Add opera mobile compat data ([@JLHwung](https://togithub.com/JLHwung))
- `babel-plugin-transform-optional-chaining`
- [#15739](https://togithub.com/babel/babel/pull/15739) Fix transform of `delete a?.b` in function params ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
- `babel-helper-split-export-declaration`, `babel-plugin-transform-modules-commonjs`
- [#15736](https://togithub.com/babel/babel/pull/15736) fix: Default export for duplicate names ([@liuxingbaoyu](https://togithub.com/liuxingbaoyu))
- `babel-compat-data`, `babel-preset-env`
- [#15726](https://togithub.com/babel/babel/pull/15726) update compat-data sources ([@JLHwung](https://togithub.com/JLHwung))
- `babel-helpers`, `babel-plugin-proposal-explicit-resource-management`, `babel-runtime-corejs3`, `babel-runtime`
- [#15705](https://togithub.com/babel/babel/pull/15705) Fix handling of sync error in `@@asyncDispose` ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
- `babel-standalone`
- [#15707](https://togithub.com/babel/babel/pull/15707) fix: Support transforming Explicit Resource Management in `stage-2` ([@liuxingbaoyu](https://togithub.com/liuxingbaoyu))
- `babel-core`
- [#15626](https://togithub.com/babel/babel/pull/15626) fix: Works correctly with `--frozen-intrinsics` ([@liuxingbaoyu](https://togithub.com/liuxingbaoyu))
##### :house: Internal
- `babel-helper-create-class-features-plugin`, `babel-plugin-transform-classes`
- [#15700](https://togithub.com/babel/babel/pull/15700) Minor class transform cleanups ([@JLHwung](https://togithub.com/JLHwung))
##### :microscope: Output optimization
- `babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining`, `babel-plugin-transform-class-properties`, `babel-plugin-transform-optional-chaining`, `babel-plugin-transform-typescript`
- [#15740](https://togithub.com/babel/babel/pull/15740) Compress output for optional chain with multiple `?.` ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
- `babel-plugin-proposal-destructuring-private`, `babel-plugin-proposal-do-expressions`, `babel-plugin-proposal-pipeline-operator`, `babel-plugin-transform-class-properties`, `babel-plugin-transform-nullish-coalescing-operator`, `babel-plugin-transform-optional-chaining`, `babel-plugin-transform-private-property-in-object`, `babel-traverse`
- [#15741](https://togithub.com/babel/babel/pull/15741) Inject tmp vars in the params list of IIFEs when possible ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
### [`v7.22.5`](https://togithub.com/babel/babel/blob/HEAD/CHANGELOG.md#v7225-2023-06-08)
[Compare Source](https://togithub.com/babel/babel/compare/v7.22.1...v7.22.5)
##### :bug: Bug Fix
- `babel-preset-env`, `babel-standalone`
- [#15675](https://togithub.com/babel/babel/pull/15675) Fix using `syntax-unicode-sets-regex` in standalone ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
##### :nail_care: Polish
- `babel-core`
- [#15683](https://togithub.com/babel/babel/pull/15683) Suggest `-transform-` when resolving missing plugins ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
emotion-js/emotion (@emotion/react)
### [`v11.11.1`](https://togithub.com/emotion-js/emotion/releases/tag/%40emotion/react%4011.11.1)
[Compare Source](https://togithub.com/emotion-js/emotion/compare/@emotion/react@11.11.0...@emotion/react@11.11.1)
##### Patch Changes
- [#3048](https://togithub.com/emotion-js/emotion/pull/3048) [`9357f337`](https://togithub.com/emotion-js/emotion/commit/9357f337200ef38f9c6df5d4dd7c20772478ea42) Thanks [@naari3](https://togithub.com/naari3)! - Added `ElementType` to the Emotion's `JSX` namespace. It's defined in the same way as the one in `@types/react` and should make it possible to use components that return `string`s, `Promise`s and other types that are valid in React.
nodejs/node (node)
### [`v18.16.1`](https://togithub.com/nodejs/node/releases/tag/v18.16.1): 2023-06-20, Version 18.16.1 'Hydrogen' (LTS), @RafaelGSS
[Compare Source](https://togithub.com/nodejs/node/compare/v18.16.0...v18.16.1)
This is a security release.
##### Notable Changes
The following CVEs are fixed in this release:
- [CVE-2023-30581](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30581): `mainModule.__proto__` Bypass Experimental Policy Mechanism (High)
- [CVE-2023-30585](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30585): Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium)
- [CVE-2023-30588](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30588): Process interuption due to invalid Public Key information in x509 certificates (Medium)
- [CVE-2023-30589](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30589): HTTP Request Smuggling via Empty headers separated by CR (Medium)
- [CVE-2023-30590](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30590): DiffieHellman does not generate keys after setting a private key (Medium)
- OpenSSL Security Releases
- [OpenSSL security advisory 28th March](https://www.openssl.org/news/secadv/20230328.txt).
- [OpenSSL security advisory 20th April](https://www.openssl.org/news/secadv/20230420.txt).
- [OpenSSL security advisory 30th May](https://www.openssl.org/news/secadv/20230530.txt)
- c-ares vulnerabilities:
- [GHSA-9g78-jv2r-p7vc](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-9g78-jv2r-p7vc)
- [GHSA-8r8p-23f3-64c2](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-8r8p-23f3-64c2)
- [GHSA-54xr-f67r-4pc4](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-54xr-f67r-4pc4)
- [GHSA-x6mf-cxr9-8q6v](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-x6mf-cxr9-8q6v)
More detailed information on each of the vulnerabilities can be found in [June 2023 Security Releases](https://nodejs.org/en/blog/vulnerability/june-2023-security-releases/) blog post.
##### Commits
- \[[`bf3e2c8928`](https://togithub.com/nodejs/node/commit/bf3e2c8928)] - **crypto**: handle cert with invalid SPKI gracefully (Tobias Nießen) [nodejs-private/node-private#393](https://togithub.com/nodejs-private/node-private/pull/393)
- \[[`70f9449072`](https://togithub.com/nodejs/node/commit/70f9449072)] - **deps**: set `CARES_RANDOM_FILE` for c-ares (Richard Lau) [#48156](https://togithub.com/nodejs/node/pull/48156)
- \[[`35d4efb57b`](https://togithub.com/nodejs/node/commit/35d4efb57b)] - **deps**: update c-ares to 1.19.1 (RafaelGSS) [#48115](https://togithub.com/nodejs/node/pull/48115)
- \[[`392dfedc77`](https://togithub.com/nodejs/node/commit/392dfedc77)] - **deps**: update archs files for openssl-3.0.9-quic1 (Node.js GitHub Bot) [#48402](https://togithub.com/nodejs/node/pull/48402)
- \[[`46cd5fe38b`](https://togithub.com/nodejs/node/commit/46cd5fe38b)] - **deps**: upgrade openssl sources to quictls/openssl-3.0.9-quic1 (Node.js GitHub Bot) [#48402](https://togithub.com/nodejs/node/pull/48402)
- \[[`7e3d2d85c2`](https://togithub.com/nodejs/node/commit/7e3d2d85c2)] - **doc,test**: clarify behavior of DH generateKeys (Tobias Nießen) [nodejs-private/node-private#426](https://togithub.com/nodejs-private/node-private/pull/426)
- \[[`4ff6ba050a`](https://togithub.com/nodejs/node/commit/4ff6ba050a)] - **http**: disable request smuggling via rempty headers (Paolo Insogna) [nodejs-private/node-private#428](https://togithub.com/nodejs-private/node-private/pull/428)
- \[[`ab269129a6`](https://togithub.com/nodejs/node/commit/ab269129a6)] - **msi**: do not create AppData\Roaming\npm (Tobias Nießen) [nodejs-private/node-private#408](https://togithub.com/nodejs-private/node-private/pull/408)
- \[[`925e8f5619`](https://togithub.com/nodejs/node/commit/925e8f5619)] - **policy**: handle mainModule.\__proto\_\_ bypass (RafaelGSS) [nodejs-private/node-private#416](https://togithub.com/nodejs-private/node-private/pull/416)
- \[[`d6fae8e47e`](https://togithub.com/nodejs/node/commit/d6fae8e47e)] - **test**: allow SIGBUS in signal-handler abort test (Michaël Zasso) [#47851](https://togithub.com/nodejs/node/pull/47851)
PlasmoHQ/plasmo (plasmo)
### [`v0.77.5`](https://togithub.com/PlasmoHQ/plasmo/releases/tag/v0.77.5)
[Compare Source](https://togithub.com/PlasmoHQ/plasmo/compare/v0.77.4...v0.77.5)
#### ✨ What's Changed
- feat: messaging/pub-sub by [@MarkJPerry](https://togithub.com/MarkJPerry) in [https://github.com/PlasmoHQ/plasmo/pull/646](https://togithub.com/PlasmoHQ/plasmo/pull/646)
- fix: BGSW targeting firefox checking for available script
- chore: update parcel to 2.9.3
- chore: update svelte to [svelte4](https://svelte.dev/blog/svelte-4)
- fix: svelte 4 module resolution by [@louisgv](https://togithub.com/louisgv) in [https://github.com/PlasmoHQ/plasmo/pull/650](https://togithub.com/PlasmoHQ/plasmo/pull/650)
- chore: move svelte and vue to a plugin package without version suffix (we will only support the latest bundler of each framework)
##### [@plasmohq/messaging](https://togithub.com/plasmohq/messaging)
- v0.5.0: A new pub-sub API landed for externally_connectable API to route message between pages and extension, useful for access token sharing between known web apps by [@MarkJPerry](https://togithub.com/MarkJPerry)
#### 🥷 New Contributors
- [@MarkJPerry](https://togithub.com/MarkJPerry) made their first contribution in [https://github.com/PlasmoHQ/plasmo/pull/646](https://togithub.com/PlasmoHQ/plasmo/pull/646)
#### 🤝 Sponsors
- [@jqphu](https://togithub.com/jqphu) - https://github.com/jqphu
- [@nahtnam](https://togithub.com/nahtnam) - https://nahtnam.com
- [@Eversmile12](https://togithub.com/Eversmile12) - https://github.com/Eversmile12
**Full Changelog**: https://github.com/PlasmoHQ/plasmo/compare/v0.76.3...v0.77.5
### [`v0.77.1`](https://togithub.com/PlasmoHQ/plasmo/compare/v0.77.0...v0.77.1)
[Compare Source](https://togithub.com/PlasmoHQ/plasmo/compare/v0.77.0...v0.77.1)
### [`v0.76.3`](https://togithub.com/PlasmoHQ/plasmo/releases/tag/v0.76.3)
[Compare Source](https://togithub.com/PlasmoHQ/plasmo/compare/v0.76.2...v0.76.3)
#### ✨ What's Changed
- feat: improve CSUI overlay repositioning by [@louisgv](https://togithub.com/louisgv) in [https://github.com/PlasmoHQ/plasmo/pull/633](https://togithub.com/PlasmoHQ/plasmo/pull/633)
- feat: cs config reload by [@louisgv](https://togithub.com/louisgv) in [https://github.com/PlasmoHQ/plasmo/pull/634](https://togithub.com/PlasmoHQ/plasmo/pull/634)
- fix: stablizie BGSW name to output single bundle for [#628](https://togithub.com/PlasmoHQ/plasmo/issues/628)
- NOTE: [#628](https://togithub.com/PlasmoHQ/plasmo/issues/628) introduces [#638](https://togithub.com/PlasmoHQ/plasmo/issues/638) a slight change in how `fetch` should be used if you're getting resources from the root of the extension bundle from BGSW. Any fetch call should now use a `/` prefix, otherwise the path will not resolve from root but rather a `/static/background` path.
- fix: [#639](https://togithub.com/PlasmoHQ/plasmo/issues/639)
##### [@plasmohq/messaging](https://togithub.com/plasmohq/messaging)
- v0.4.0: Relay API now accepts a `targetOrigin` param to specify which origin should the message be relayed to. When using with a website, you will want to assign a chrome ID. See https://www.plasmo.com/blog/posts/how-to-create-a-consistent-id-for-your-chrome-extension for how to generate a consistent ID
#### 🤝 Sponsors
- [@jqphu](https://togithub.com/jqphu) - https://github.com/jqphu
- [@nahtnam](https://togithub.com/nahtnam) - https://nahtnam.com
- [@Eversmile12](https://togithub.com/Eversmile12) - https://github.com/Eversmile12
**Full Changelog**: https://github.com/PlasmoHQ/plasmo/compare/v0.75.3...v0.76.3
### [`v0.76.2`](https://togithub.com/PlasmoHQ/plasmo/compare/v0.76.1...v0.76.2)
[Compare Source](https://togithub.com/PlasmoHQ/plasmo/compare/v0.76.1...v0.76.2)
### [`v0.76.1`](https://togithub.com/PlasmoHQ/plasmo/compare/v0.76.0...v0.76.1)
[Compare Source](https://togithub.com/PlasmoHQ/plasmo/compare/v0.76.0...v0.76.1)
### [`v0.76.0`](https://togithub.com/PlasmoHQ/plasmo/compare/v0.75.3...v0.76.0)
[Compare Source](https://togithub.com/PlasmoHQ/plasmo/compare/v0.75.3...v0.76.0)
### [`v0.75.3`](https://togithub.com/PlasmoHQ/plasmo/releases/tag/v0.75.3)
[Compare Source](https://togithub.com/PlasmoHQ/plasmo/compare/v0.75.2...v0.75.3)
#### ✨ What's Changed
- doc: update linking guide for create-plasmo tool error by [@bbuono](https://togithub.com/bbuono) in [https://github.com/PlasmoHQ/plasmo/pull/620](https://togithub.com/PlasmoHQ/plasmo/pull/620)
- fix: update parcel, move node resolver to last post-reresolve by [@louisgv](https://togithub.com/louisgv) in [https://github.com/PlasmoHQ/plasmo/pull/617](https://togithub.com/PlasmoHQ/plasmo/pull/617)
- fix: firefox bgsw bundling and csp by [@louisgv](https://togithub.com/louisgv) in [https://github.com/PlasmoHQ/plasmo/pull/632](https://togithub.com/PlasmoHQ/plasmo/pull/632)
#### 🥷 New Contributors
- [@bbuono](https://togithub.com/bbuono) made their first contribution in [https://github.com/PlasmoHQ/plasmo/pull/620](https://togithub.com/PlasmoHQ/plasmo/pull/620)
#### 🤝 Sponsors
- [@jqphu](https://togithub.com/jqphu) - https://github.com/jqphu
- [@nahtnam](https://togithub.com/nahtnam) - https://nahtnam.com
- [@Eversmile12](https://togithub.com/Eversmile12) - https://github.com/Eversmile12
**Full Changelog**: https://github.com/PlasmoHQ/plasmo/compare/v0.74.2...v0.75.3
Microsoft/TypeScript (typescript)
### [`v5.1.6`](https://togithub.com/microsoft/TypeScript/releases/tag/v5.1.6): TypeScript 5.1.6
[Compare Source](https://togithub.com/Microsoft/TypeScript/compare/v5.1.5...v5.1.6)
For release notes, check out the [release announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-5-1/).
For the complete list of fixed issues, check out the
- [fixed issues query for Typescript v5.1.0 (Beta)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.0%22+is%3Aclosed+).
- [fixed issues query for Typescript v5.1.1 (RC)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.1%22+is%3Aclosed+).
- [fixed issues query for Typescript v5.1.2 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.2%22+is%3Aclosed+).
- [fixed issues query for Typescript v5.1.3 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.3%22+is%3Aclosed+).
- (5.1.4 [intentionally skipped](https://togithub.com/microsoft/TypeScript/issues/53031#issuecomment-1610038922))
- [fixed issues query for Typescript v5.1.5 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.5%22+is%3Aclosed+).
- [fixed issues query for Typescript v5.1.6 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.6%22+is%3Aclosed+).
Downloads are available on [npm](https://www.npmjs.com/package/typescript)
### [`v5.1.5`](https://togithub.com/microsoft/TypeScript/releases/tag/v5.1.5): TypeScript 5.1.5
[Compare Source](https://togithub.com/Microsoft/TypeScript/compare/v5.1.3...v5.1.5)
For release notes, check out the [release announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-5-1/).
For the complete list of fixed issues, check out the
- [fixed issues query for Typescript v5.1.0 (Beta)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.0%22+is%3Aclosed+).
- [fixed issues query for Typescript v5.1.1 (RC)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.1%22+is%3Aclosed+).
- [fixed issues query for Typescript v5.1.2 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.2%22+is%3Aclosed+).
- [fixed issues query for Typescript v5.1.3 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.3%22+is%3Aclosed+).
- (5.1.4 [intentionally skipped](https://togithub.com/microsoft/TypeScript/issues/53031#issuecomment-1610038922))
- [fixed issues query for Typescript v5.1.5 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.5%22+is%3Aclosed+).
Downloads are available on:
- [npm](https://www.npmjs.com/package/typescript)
- [NuGet package](https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild)
Configuration
📅 Schedule: Branch creation - "on friday and saturday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
[ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
7.22.1
->7.22.8
7.22.4
->7.22.7
7.22.4
->7.22.7
7.22.3
->7.22.6
11.11.0
->11.11.1
1.6.1
->1.6.2
0.0.237
->0.0.240
18.16.16
->18.16.19
18.2.8
->18.2.14
18.2.4
->18.2.6
18.16.0
->18.16.1
0.75.2
->0.77.5
5.1.3
->5.1.6
Release Notes
babel/babel (@babel/core)
### [`v7.22.8`](https://togithub.com/babel/babel/blob/HEAD/CHANGELOG.md#v7228-2023-07-06) [Compare Source](https://togithub.com/babel/babel/compare/v7.22.7...v7.22.8) ##### :leftwards_arrow_with_hook: Revert - `babel-core`, `babel-traverse` - [#15754](https://togithub.com/babel/babel/pull/15754) Revert "Use `NodePath#hub` as part of the paths cache key" ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) ### [`v7.22.7`](https://togithub.com/babel/babel/blob/HEAD/CHANGELOG.md#v7227-2023-07-06) [Compare Source](https://togithub.com/babel/babel/compare/v7.22.6...v7.22.7) ##### :bug: Bug Fix - `babel-generator` - [#15719](https://togithub.com/babel/babel/pull/15719) fix: Avoid internally generating negative source maps columns ([@liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-core`, `babel-traverse` - [#15725](https://togithub.com/babel/babel/pull/15725) Use `NodePath#hub` as part of the paths cache key ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - Other - [#15747](https://togithub.com/babel/babel/pull/15747) fix: export `meta` from `eslint-parser/experimental-worker` ([@JLHwung](https://togithub.com/JLHwung)) ##### :house: Internal - `babel-core`, `babel-traverse` - [#15702](https://togithub.com/babel/babel/pull/15702) Refactor visitors merging ([@nullableVoidPtr](https://togithub.com/nullableVoidPtr)) ### [`v7.22.6`](https://togithub.com/babel/babel/blob/HEAD/CHANGELOG.md#v7226-2023-07-04) [Compare Source](https://togithub.com/babel/babel/compare/v7.22.5...v7.22.6) ##### :bug: Bug Fix - `babel-compat-data`, `babel-helper-compilation-targets`, `babel-preset-env` - [#15727](https://togithub.com/babel/babel/pull/15727) Add opera mobile compat data ([@JLHwung](https://togithub.com/JLHwung)) - `babel-plugin-transform-optional-chaining` - [#15739](https://togithub.com/babel/babel/pull/15739) Fix transform of `delete a?.b` in function params ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helper-split-export-declaration`, `babel-plugin-transform-modules-commonjs` - [#15736](https://togithub.com/babel/babel/pull/15736) fix: Default export for duplicate names ([@liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-compat-data`, `babel-preset-env` - [#15726](https://togithub.com/babel/babel/pull/15726) update compat-data sources ([@JLHwung](https://togithub.com/JLHwung)) - `babel-helpers`, `babel-plugin-proposal-explicit-resource-management`, `babel-runtime-corejs3`, `babel-runtime` - [#15705](https://togithub.com/babel/babel/pull/15705) Fix handling of sync error in `@@asyncDispose` ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-standalone` - [#15707](https://togithub.com/babel/babel/pull/15707) fix: Support transforming Explicit Resource Management in `stage-2` ([@liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-core` - [#15626](https://togithub.com/babel/babel/pull/15626) fix: Works correctly with `--frozen-intrinsics` ([@liuxingbaoyu](https://togithub.com/liuxingbaoyu)) ##### :house: Internal - `babel-helper-create-class-features-plugin`, `babel-plugin-transform-classes` - [#15700](https://togithub.com/babel/babel/pull/15700) Minor class transform cleanups ([@JLHwung](https://togithub.com/JLHwung)) ##### :microscope: Output optimization - `babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining`, `babel-plugin-transform-class-properties`, `babel-plugin-transform-optional-chaining`, `babel-plugin-transform-typescript` - [#15740](https://togithub.com/babel/babel/pull/15740) Compress output for optional chain with multiple `?.` ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-plugin-proposal-destructuring-private`, `babel-plugin-proposal-do-expressions`, `babel-plugin-proposal-pipeline-operator`, `babel-plugin-transform-class-properties`, `babel-plugin-transform-nullish-coalescing-operator`, `babel-plugin-transform-optional-chaining`, `babel-plugin-transform-private-property-in-object`, `babel-traverse` - [#15741](https://togithub.com/babel/babel/pull/15741) Inject tmp vars in the params list of IIFEs when possible ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) ### [`v7.22.5`](https://togithub.com/babel/babel/blob/HEAD/CHANGELOG.md#v7225-2023-06-08) [Compare Source](https://togithub.com/babel/babel/compare/v7.22.1...v7.22.5) ##### :bug: Bug Fix - `babel-preset-env`, `babel-standalone` - [#15675](https://togithub.com/babel/babel/pull/15675) Fix using `syntax-unicode-sets-regex` in standalone ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) ##### :nail_care: Polish - `babel-core` - [#15683](https://togithub.com/babel/babel/pull/15683) Suggest `-transform-` when resolving missing plugins ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))emotion-js/emotion (@emotion/react)
### [`v11.11.1`](https://togithub.com/emotion-js/emotion/releases/tag/%40emotion/react%4011.11.1) [Compare Source](https://togithub.com/emotion-js/emotion/compare/@emotion/react@11.11.0...@emotion/react@11.11.1) ##### Patch Changes - [#3048](https://togithub.com/emotion-js/emotion/pull/3048) [`9357f337`](https://togithub.com/emotion-js/emotion/commit/9357f337200ef38f9c6df5d4dd7c20772478ea42) Thanks [@naari3](https://togithub.com/naari3)! - Added `ElementType` to the Emotion's `JSX` namespace. It's defined in the same way as the one in `@types/react` and should make it possible to use components that return `string`s, `Promise`s and other types that are valid in React.nodejs/node (node)
### [`v18.16.1`](https://togithub.com/nodejs/node/releases/tag/v18.16.1): 2023-06-20, Version 18.16.1 'Hydrogen' (LTS), @RafaelGSS [Compare Source](https://togithub.com/nodejs/node/compare/v18.16.0...v18.16.1) This is a security release. ##### Notable Changes The following CVEs are fixed in this release: - [CVE-2023-30581](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30581): `mainModule.__proto__` Bypass Experimental Policy Mechanism (High) - [CVE-2023-30585](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30585): Privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (Medium) - [CVE-2023-30588](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30588): Process interuption due to invalid Public Key information in x509 certificates (Medium) - [CVE-2023-30589](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30589): HTTP Request Smuggling via Empty headers separated by CR (Medium) - [CVE-2023-30590](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30590): DiffieHellman does not generate keys after setting a private key (Medium) - OpenSSL Security Releases - [OpenSSL security advisory 28th March](https://www.openssl.org/news/secadv/20230328.txt). - [OpenSSL security advisory 20th April](https://www.openssl.org/news/secadv/20230420.txt). - [OpenSSL security advisory 30th May](https://www.openssl.org/news/secadv/20230530.txt) - c-ares vulnerabilities: - [GHSA-9g78-jv2r-p7vc](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-9g78-jv2r-p7vc) - [GHSA-8r8p-23f3-64c2](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-8r8p-23f3-64c2) - [GHSA-54xr-f67r-4pc4](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-54xr-f67r-4pc4) - [GHSA-x6mf-cxr9-8q6v](https://togithub.com/c-ares/c-ares/security/advisories/GHSA-x6mf-cxr9-8q6v) More detailed information on each of the vulnerabilities can be found in [June 2023 Security Releases](https://nodejs.org/en/blog/vulnerability/june-2023-security-releases/) blog post. ##### Commits - \[[`bf3e2c8928`](https://togithub.com/nodejs/node/commit/bf3e2c8928)] - **crypto**: handle cert with invalid SPKI gracefully (Tobias Nießen) [nodejs-private/node-private#393](https://togithub.com/nodejs-private/node-private/pull/393) - \[[`70f9449072`](https://togithub.com/nodejs/node/commit/70f9449072)] - **deps**: set `CARES_RANDOM_FILE` for c-ares (Richard Lau) [#48156](https://togithub.com/nodejs/node/pull/48156) - \[[`35d4efb57b`](https://togithub.com/nodejs/node/commit/35d4efb57b)] - **deps**: update c-ares to 1.19.1 (RafaelGSS) [#48115](https://togithub.com/nodejs/node/pull/48115) - \[[`392dfedc77`](https://togithub.com/nodejs/node/commit/392dfedc77)] - **deps**: update archs files for openssl-3.0.9-quic1 (Node.js GitHub Bot) [#48402](https://togithub.com/nodejs/node/pull/48402) - \[[`46cd5fe38b`](https://togithub.com/nodejs/node/commit/46cd5fe38b)] - **deps**: upgrade openssl sources to quictls/openssl-3.0.9-quic1 (Node.js GitHub Bot) [#48402](https://togithub.com/nodejs/node/pull/48402) - \[[`7e3d2d85c2`](https://togithub.com/nodejs/node/commit/7e3d2d85c2)] - **doc,test**: clarify behavior of DH generateKeys (Tobias Nießen) [nodejs-private/node-private#426](https://togithub.com/nodejs-private/node-private/pull/426) - \[[`4ff6ba050a`](https://togithub.com/nodejs/node/commit/4ff6ba050a)] - **http**: disable request smuggling via rempty headers (Paolo Insogna) [nodejs-private/node-private#428](https://togithub.com/nodejs-private/node-private/pull/428) - \[[`ab269129a6`](https://togithub.com/nodejs/node/commit/ab269129a6)] - **msi**: do not create AppData\Roaming\npm (Tobias Nießen) [nodejs-private/node-private#408](https://togithub.com/nodejs-private/node-private/pull/408) - \[[`925e8f5619`](https://togithub.com/nodejs/node/commit/925e8f5619)] - **policy**: handle mainModule.\__proto\_\_ bypass (RafaelGSS) [nodejs-private/node-private#416](https://togithub.com/nodejs-private/node-private/pull/416) - \[[`d6fae8e47e`](https://togithub.com/nodejs/node/commit/d6fae8e47e)] - **test**: allow SIGBUS in signal-handler abort test (Michaël Zasso) [#47851](https://togithub.com/nodejs/node/pull/47851)PlasmoHQ/plasmo (plasmo)
### [`v0.77.5`](https://togithub.com/PlasmoHQ/plasmo/releases/tag/v0.77.5) [Compare Source](https://togithub.com/PlasmoHQ/plasmo/compare/v0.77.4...v0.77.5) #### ✨ What's Changed - feat: messaging/pub-sub by [@MarkJPerry](https://togithub.com/MarkJPerry) in [https://github.com/PlasmoHQ/plasmo/pull/646](https://togithub.com/PlasmoHQ/plasmo/pull/646) - fix: BGSW targeting firefox checking for available script - chore: update parcel to 2.9.3 - chore: update svelte to [svelte4](https://svelte.dev/blog/svelte-4) - fix: svelte 4 module resolution by [@louisgv](https://togithub.com/louisgv) in [https://github.com/PlasmoHQ/plasmo/pull/650](https://togithub.com/PlasmoHQ/plasmo/pull/650) - chore: move svelte and vue to a plugin package without version suffix (we will only support the latest bundler of each framework) ##### [@plasmohq/messaging](https://togithub.com/plasmohq/messaging) - v0.5.0: A new pub-sub API landed for externally_connectable API to route message between pages and extension, useful for access token sharing between known web apps by [@MarkJPerry](https://togithub.com/MarkJPerry) #### 🥷 New Contributors - [@MarkJPerry](https://togithub.com/MarkJPerry) made their first contribution in [https://github.com/PlasmoHQ/plasmo/pull/646](https://togithub.com/PlasmoHQ/plasmo/pull/646) #### 🤝 Sponsors - [@jqphu](https://togithub.com/jqphu) - https://github.com/jqphu - [@nahtnam](https://togithub.com/nahtnam) - https://nahtnam.com - [@Eversmile12](https://togithub.com/Eversmile12) - https://github.com/Eversmile12 **Full Changelog**: https://github.com/PlasmoHQ/plasmo/compare/v0.76.3...v0.77.5 ### [`v0.77.1`](https://togithub.com/PlasmoHQ/plasmo/compare/v0.77.0...v0.77.1) [Compare Source](https://togithub.com/PlasmoHQ/plasmo/compare/v0.77.0...v0.77.1) ### [`v0.76.3`](https://togithub.com/PlasmoHQ/plasmo/releases/tag/v0.76.3) [Compare Source](https://togithub.com/PlasmoHQ/plasmo/compare/v0.76.2...v0.76.3) #### ✨ What's Changed - feat: improve CSUI overlay repositioning by [@louisgv](https://togithub.com/louisgv) in [https://github.com/PlasmoHQ/plasmo/pull/633](https://togithub.com/PlasmoHQ/plasmo/pull/633) - feat: cs config reload by [@louisgv](https://togithub.com/louisgv) in [https://github.com/PlasmoHQ/plasmo/pull/634](https://togithub.com/PlasmoHQ/plasmo/pull/634) - fix: stablizie BGSW name to output single bundle for [#628](https://togithub.com/PlasmoHQ/plasmo/issues/628) - NOTE: [#628](https://togithub.com/PlasmoHQ/plasmo/issues/628) introduces [#638](https://togithub.com/PlasmoHQ/plasmo/issues/638) a slight change in how `fetch` should be used if you're getting resources from the root of the extension bundle from BGSW. Any fetch call should now use a `/` prefix, otherwise the path will not resolve from root but rather a `/static/background` path. - fix: [#639](https://togithub.com/PlasmoHQ/plasmo/issues/639) ##### [@plasmohq/messaging](https://togithub.com/plasmohq/messaging) - v0.4.0: Relay API now accepts a `targetOrigin` param to specify which origin should the message be relayed to. When using with a website, you will want to assign a chrome ID. See https://www.plasmo.com/blog/posts/how-to-create-a-consistent-id-for-your-chrome-extension for how to generate a consistent ID #### 🤝 Sponsors - [@jqphu](https://togithub.com/jqphu) - https://github.com/jqphu - [@nahtnam](https://togithub.com/nahtnam) - https://nahtnam.com - [@Eversmile12](https://togithub.com/Eversmile12) - https://github.com/Eversmile12 **Full Changelog**: https://github.com/PlasmoHQ/plasmo/compare/v0.75.3...v0.76.3 ### [`v0.76.2`](https://togithub.com/PlasmoHQ/plasmo/compare/v0.76.1...v0.76.2) [Compare Source](https://togithub.com/PlasmoHQ/plasmo/compare/v0.76.1...v0.76.2) ### [`v0.76.1`](https://togithub.com/PlasmoHQ/plasmo/compare/v0.76.0...v0.76.1) [Compare Source](https://togithub.com/PlasmoHQ/plasmo/compare/v0.76.0...v0.76.1) ### [`v0.76.0`](https://togithub.com/PlasmoHQ/plasmo/compare/v0.75.3...v0.76.0) [Compare Source](https://togithub.com/PlasmoHQ/plasmo/compare/v0.75.3...v0.76.0) ### [`v0.75.3`](https://togithub.com/PlasmoHQ/plasmo/releases/tag/v0.75.3) [Compare Source](https://togithub.com/PlasmoHQ/plasmo/compare/v0.75.2...v0.75.3) #### ✨ What's Changed - doc: update linking guide for create-plasmo tool error by [@bbuono](https://togithub.com/bbuono) in [https://github.com/PlasmoHQ/plasmo/pull/620](https://togithub.com/PlasmoHQ/plasmo/pull/620) - fix: update parcel, move node resolver to last post-reresolve by [@louisgv](https://togithub.com/louisgv) in [https://github.com/PlasmoHQ/plasmo/pull/617](https://togithub.com/PlasmoHQ/plasmo/pull/617) - fix: firefox bgsw bundling and csp by [@louisgv](https://togithub.com/louisgv) in [https://github.com/PlasmoHQ/plasmo/pull/632](https://togithub.com/PlasmoHQ/plasmo/pull/632) #### 🥷 New Contributors - [@bbuono](https://togithub.com/bbuono) made their first contribution in [https://github.com/PlasmoHQ/plasmo/pull/620](https://togithub.com/PlasmoHQ/plasmo/pull/620) #### 🤝 Sponsors - [@jqphu](https://togithub.com/jqphu) - https://github.com/jqphu - [@nahtnam](https://togithub.com/nahtnam) - https://nahtnam.com - [@Eversmile12](https://togithub.com/Eversmile12) - https://github.com/Eversmile12 **Full Changelog**: https://github.com/PlasmoHQ/plasmo/compare/v0.74.2...v0.75.3Microsoft/TypeScript (typescript)
### [`v5.1.6`](https://togithub.com/microsoft/TypeScript/releases/tag/v5.1.6): TypeScript 5.1.6 [Compare Source](https://togithub.com/Microsoft/TypeScript/compare/v5.1.5...v5.1.6) For release notes, check out the [release announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-5-1/). For the complete list of fixed issues, check out the - [fixed issues query for Typescript v5.1.0 (Beta)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.0%22+is%3Aclosed+). - [fixed issues query for Typescript v5.1.1 (RC)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.1%22+is%3Aclosed+). - [fixed issues query for Typescript v5.1.2 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.2%22+is%3Aclosed+). - [fixed issues query for Typescript v5.1.3 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.3%22+is%3Aclosed+). - (5.1.4 [intentionally skipped](https://togithub.com/microsoft/TypeScript/issues/53031#issuecomment-1610038922)) - [fixed issues query for Typescript v5.1.5 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.5%22+is%3Aclosed+). - [fixed issues query for Typescript v5.1.6 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.6%22+is%3Aclosed+). Downloads are available on [npm](https://www.npmjs.com/package/typescript) ### [`v5.1.5`](https://togithub.com/microsoft/TypeScript/releases/tag/v5.1.5): TypeScript 5.1.5 [Compare Source](https://togithub.com/Microsoft/TypeScript/compare/v5.1.3...v5.1.5) For release notes, check out the [release announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-5-1/). For the complete list of fixed issues, check out the - [fixed issues query for Typescript v5.1.0 (Beta)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.0%22+is%3Aclosed+). - [fixed issues query for Typescript v5.1.1 (RC)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.1%22+is%3Aclosed+). - [fixed issues query for Typescript v5.1.2 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.2%22+is%3Aclosed+). - [fixed issues query for Typescript v5.1.3 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.3%22+is%3Aclosed+). - (5.1.4 [intentionally skipped](https://togithub.com/microsoft/TypeScript/issues/53031#issuecomment-1610038922)) - [fixed issues query for Typescript v5.1.5 (Stable)](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=milestone%3A%22TypeScript+5.1.5%22+is%3Aclosed+). Downloads are available on: - [npm](https://www.npmjs.com/package/typescript) - [NuGet package](https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild)Configuration
📅 Schedule: Branch creation - "on friday and saturday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.