[Snyk] Security upgrade parcel from 2.0.0-beta.3.1 to 2.0.0

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-CSSWHAT-1298035	No	No Known Exploit
	526/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 4.1	Arbitrary Code Injection SNYK-JS-EJS-1049328	No	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-NTHCHECK-1586032	No	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1090595	No	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: parcel

The new version differs by 206 commits.

• 84da50a v2.0.0
• aa0a369 Small copy change
• c78601b shouldVisitChild: Check parent and child node previously deferred separately (#7043)
• 2c83842 Fix scope resolution for TS enums (#7057)
• dbe1153 Fix order of hoisted variable declarations (#7053)
• bea9442 Fix named export with different export name for wrapped assets (#7052)
• 2175e1b Mark '*' as used when the reexport is only decided at runtime (#7049)
• 4312b91 Update Micromatch (#6958)
• 5afe766 Fail when unable to build a native package (#6962)
• 971ed24 Update watcher and source-map library to 2.0.0 (#7044)
• 810a854 Add missing C flags for SIMD support in build workflow (#7045)
• d6de61d Fix shaking for functions types with overload signatures (#7036)
• daf2cd9 Safely position the HMR script (#6961)
• 89b4e51 Unmark defer for dependency that become used ('does not export') (#7035)
• b575212 Bump swc (#7033)
• 415710f Fix CSS tree shaking with 'build --no-scope-hoist' (#5728)
• ea0f4e4 Allow jsx and tsx as lang for script block in Vue SFCs (#6983)
• d2d4f1c Never enable JSX in a .ts file (#7031)
• aafc318 Don't use deprecated querystring package (#6806)
• a6a6fb2 Fix cache invalidation when shouldOptimize changes (#7030)
• 7d4d53a Update all references to v2.parceljs.org to just parceljs.org (#7029)
• 91de5c0 Ensure symbol order is consistent (#7021)
• 2ebed00 Ensure named exports are prioritized over wildcard re-exports (#7016)
• 4904f20 Fix autoinstall with Yarn 2+ (#7023)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

[codecov[bot]]

Codecov Report

Merging #160 (95ea28c) into master (a2f0f2b) will not change coverage. The diff coverage is n/a.

@@            Coverage Diff            @@
##            master      #160   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            7         7           
  Lines          163       163           
  Branches        39        39           
=========================================
  Hits           163       163           

---

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update a2f0f2b...95ea28c. Read the comment docs.

[shazron]

Closing in favor of #158