DeviaVir / zenbot

Zenbot is a command-line cryptocurrency trading bot using Node.js and MongoDB.
MIT License
8.21k stars 2.04k forks source link

[Snyk] Upgrade @babel/core from 7.14.6 to 7.16.7 #2777

Closed snyk-bot closed 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to upgrade @babel/core from 7.14.6 to 7.16.7.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Open Redirect
SNYK-JS-NODEFORGE-2331910
449/1000
Why? Proof of Concept exploit, Recently disclosed, CVSS 5.4
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: @babel/core
  • 7.16.7 - 2021-12-31

    v7.16.7 (2021-12-31)

    Thanks @ exb for your first PR!

    👓 Spec Compliance

    • babel-parser

    🐛 Bug Fix

    • babel-plugin-transform-runtime, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
      • #14081 Import the correct ./typeof.js helper in @ babel/runtime (@ exb)
    • babel-helpers
    • babel-helper-function-name, babel-plugin-transform-function-name

    💅 Polish

    Committers: 4

  • 7.16.5 - 2021-12-13

    v7.16.5 (2021-12-13)

    Thanks @ chimurai and @ krosenberg for your first PRs!

    👓 Spec Compliance

    • babel-cli, babel-core, babel-helpers, babel-plugin-proposal-class-properties, babel-plugin-proposal-decorators, babel-plugin-transform-classes, babel-plugin-transform-jscript, babel-plugin-transform-parameters, babel-plugin-transform-runtime, babel-plugin-transform-spread, babel-plugin-transform-typescript, babel-preset-env

    🐛 Bug Fix

    • babel-plugin-transform-parameters
    • babel-plugin-transform-arrow-functions, babel-traverse
    • babel-parser
    • babel-traverse
    • babel-generator
    • babel-plugin-transform-react-jsx
    • babel-helper-create-class-features-plugin, babel-helper-environment-visitor, babel-helper-member-expression-to-functions, babel-helper-module-transforms, babel-helper-replace-supers, babel-plugin-transform-classes, babel-traverse

    💅 Polish

    📝 Documentation

    🏠 Internal

    • Every package
    • babel-parser
      • #13982 Extend hasPlugin to accept plugin-configuration array pairs (@ js-choi)
    • babel-helpers
    • babel-plugin-proposal-object-rest-spread, babel-traverse
    • babel-parser, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-optional-chaining, babel-preset-react, babel-preset-typescript
    • Other

    🏃‍♀️ Performance

    🔬 Output optimization

    • babel-helpers, babel-plugin-proposal-async-generator-functions, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime

    Committers: 10

  • 7.16.0 - 2021-10-29

    v7.16.0 (2021-10-30)

    👓 Spec Compliance

    • babel-helpers, babel-plugin-proposal-async-generator-functions, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

    🚀 New Feature

    • babel-generator, babel-parser, babel-plugin-transform-typescript, babel-types
    • babel-parser
    • babel-helper-fixtures, babel-helper-transform-fixture-test-runner, babel-parser, babel-plugin-syntax-typescript, babel-preset-typescript
    • Other
    • babel-generator, babel-parser, babel-plugin-proposal-pipeline-operator, babel-plugin-syntax-pipeline-operator
    • babel-compat-data, babel-generator, babel-parser, babel-preset-env, babel-types
    • babel-helper-skip-transparent-expression-wrappers, babel-plugin-proposal-optional-chaining
    • babel-traverse, babel-types

    🐛 Bug Fix

    • babel-parser, babel-plugin-transform-typescript
    • babel-plugin-transform-typescript
      • #13865 fix: allow enum member without initializer after non-literal member (@ lightmare)
    • babel-core, babel-helper-create-class-features-plugin, babel-plugin-transform-typescript
      • #13854 Don't transform declare class in plugin-proposal-class-properties (@ forivall)
    • babel-compat-data, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-transform-react-constant-elements, babel-preset-env, babel-traverse
      • #13842 Implement @ babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression (@ JLHwung)
    • babel-plugin-proposal-async-generator-functions, babel-traverse
    • babel-traverse, babel-types
    • babel-generator

    🏠 Internal

    • Every package
    • Other
    • babel-helper-fixtures, babel-plugin-proposal-class-properties, babel-plugin-transform-runtime, babel-preset-react
    • babel-types
      • #13844 [ts] precise return type on createTypeAnnotationBasedOnTypeof (babel-types) (@ lightmare)
    • babel-helpers
    • babel-core, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx, babel-types

    🏃‍♀️ Performance

    • babel-types

    Committers: 9

  • 7.15.8 - 2021-10-06
    Read more
  • 7.15.5 - 2021-09-04
  • 7.15.4 - 2021-09-02
  • 7.15.0 - 2021-08-04
  • 7.14.8 - 2021-07-20
  • 7.14.6 - 2021-06-14
from @babel/core GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs