deps: bump the safe-app-dependencies group with 4 updates

[dependabot[bot]]

Bumps the safe-app-dependencies group with 4 updates: firebase, @babel/core, @babel/preset-env and uglify-js.

Updates firebase from 10.12.3 to 10.12.4

Release notes

Sourced from firebase's releases.

firebase@10.12.4

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

@​firebase/analytics@​0.10.6

Patch Changes

• f58d48cd4 #8301 - Begin using safevalues to sanitize HTML vulnerable to XSS.

@​firebase/analytics-compat@​0.2.12

Patch Changes

• Updated dependencies [f58d48cd4]:
• @​firebase/analytics@​0.10.6

@​firebase/app@​0.10.7

Patch Changes

• Update SDK_VERSION.

@​firebase/app-check@​0.8.6

Patch Changes

• f58d48cd4 #8301 - Begin using safevalues to sanitize HTML vulnerable to XSS.

@​firebase/app-check-compat@​0.3.13

Patch Changes

• Updated dependencies [f58d48cd4]:
• @​firebase/app-check@​0.8.6

@​firebase/app-compat@​0.2.37

Patch Changes

• Updated dependencies []:
• @​firebase/app@​0.10.7

firebase@10.12.4

Patch Changes

• Updated dependencies [f58d48cd4]:
• @​firebase/app@​0.10.7

... (truncated)

Commits

• 67ea4f7 Version Packages (#8369)
• 161c122 Merge master into release
• fd8bd4b Disable extraneous import errors on violating lines in auth tests (#8363)
• f58d48c Use safevalues to fix trusted types issues reported by tsec (#8301)
• 4b4db85 VertexAI: add support for mock responses versioning system (#8361)
• 84fe880 Remove .git (#8362)
• d752e80 Upgrade firebase-admin and google/cloud-firestore in rules-unit-testing yarn ...
• 9cd3c1e Upgrade setup-gcloud to v2 (#8286)
• See full diff in compare view

Updates @babel/core from 7.24.7 to 7.25.2

Release notes

Sourced from @​babel/core's releases.

v7.25.2 (2024-07-30)

:bug: Bug Fix

• babel-core, babel-traverse
  • #16695 Ensure that requeueComputedKeyAndDecorators is available (@​nicolo-ribaudo)

Committers: 2

• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)

v7.25.1 (2024-07-28)

:bug: Bug Fix

• babel-plugin-transform-function-name
  • #16683 fix: ensureFunctionName may be undefined (@​liuxingbaoyu)
• babel-plugin-transform-react-constant-elements
  • #16582 fix plugin-transform-react-constant-elements transform JSXFrament but not add JSXExpressionContainer (@​keiseiTi)
• babel-traverse
  • #16587 fix: fixed issue16583 + test (@​nerodesu017)

:house: Internal

• #16663 Test eslint plugin against eslint 9 (@​JLHwung)

Committers: 4

• Adrian (@​nerodesu017)
• Huáng Jùnliàng (@​JLHwung)
• @​keiseiTi
• @​liuxingbaoyu

v7.25.0 (2024-07-26)

Thanks @​davidtaylorhq and @​slatereax for your first PR!

You can find the release blog post with some highlights at https://babeljs.io/blog/2024/07/26/7.25.0.

:eyeglasses: Spec Compliance

• babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3
  • #16537 await using normative updates (@​JLHwung)
• babel-plugin-transform-typescript
  • #16602 Ensure enum members syntactically determinable to be strings do not get reverse mappings (@​liuxingbaoyu)

:rocket: New Feature

• babel-helper-create-class-features-plugin, babel-helper-function-name, babel-helper-plugin-utils, babel-helper-wrap-function, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-preset-env, babel-traverse, babel-types
  • #16658 Move ensureFunctionName to NodePath.prototype (@​nicolo-ribaudo)
• babel-helper-hoist-variables, babel-helper-plugin-utils, babel-plugin-proposal-async-do-expressions, babel-plugin-transform-modules-systemjs, babel-traverse
  • #16644 Move hoistVariables to Scope.prototype (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-split-export-declaration, babel-plugin-transform-classes, babel-traverse, babel-types
  • #16645 Move splitExportDeclaration to NodePath.prototype (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-helper-environment-visitor, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-remap-async-to-generator, babel-helper-replace-supers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-transform-async-generator-functions, babel-plugin-transform-classes, babel-traverse
  • #16649 Move environment-visitor helper into @babel/traverse (@​nicolo-ribaudo)

... (truncated)

Changelog

Sourced from @​babel/core's changelog.

v7.25.2 (2024-07-30)

:bug: Bug Fix

• babel-core, babel-traverse
  • #16695 Ensure that requeueComputedKeyAndDecorators is available (@​nicolo-ribaudo)

v7.25.1 (2024-07-28)

:bug: Bug Fix

• babel-plugin-transform-function-name
  • #16683 fix: ensureFunctionName may be undefined (@​liuxingbaoyu)
• babel-plugin-transform-react-constant-elements
  • #16582 fix plugin-transform-react-constant-elements transform JSXFrament but not add JSXExpressionContainer (@​keiseiTi)
• babel-traverse
  • #16587 fix: fixed issue16583 + test (@​nerodesu017)

:house: Internal

• #16663 Test eslint plugin against eslint 9 (@​JLHwung)

v7.25.0 (2024-07-26)

:eyeglasses: Spec Compliance

• babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3
  • #16537 await using normative updates (@​JLHwung)
• babel-plugin-transform-typescript
  • #16602 Ensure enum members syntactically determinable to be strings do not get reverse mappings (@​liuxingbaoyu)

:rocket: New Feature

• babel-helper-create-class-features-plugin, babel-helper-function-name, babel-helper-plugin-utils, babel-helper-wrap-function, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-preset-env, babel-traverse, babel-types
  • #16658 Move ensureFunctionName to NodePath.prototype (@​nicolo-ribaudo)
• babel-helper-hoist-variables, babel-helper-plugin-utils, babel-plugin-proposal-async-do-expressions, babel-plugin-transform-modules-systemjs, babel-traverse
  • #16644 Move hoistVariables to Scope.prototype (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-split-export-declaration, babel-plugin-transform-classes, babel-traverse, babel-types
  • #16645 Move splitExportDeclaration to NodePath.prototype (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-helper-environment-visitor, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-remap-async-to-generator, babel-helper-replace-supers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-transform-async-generator-functions, babel-plugin-transform-classes, babel-traverse
  • #16649 Move environment-visitor helper into @babel/traverse (@​nicolo-ribaudo)
• babel-core, babel-parser
  • #16480 Expose wether a module has TLA or not as .extra.async (@​nicolo-ribaudo)
• babel-compat-data, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-preset-env
  • #16569 Introduce bugfix-safari-class-field-initializer-scope (@​davidtaylorhq)
• babel-plugin-transform-block-scoping, babel-traverse, babel-types
  • #16551 Add NodePath#getAssignmentIdentifiers (@​JLHwung)
• babel-helper-import-to-platform-api, babel-plugin-proposal-json-modules
  • #16579 Add uncheckedRequire option for JSON imports to CJS (@​nicolo-ribaudo)
• babel-helper-transform-fixture-test-runner, babel-node
  • #16642 Allow using custom config in babel-node --eval (@​slatereax)
• babel-compat-data, babel-helper-create-regexp-features-plugin, babel-plugin-proposal-duplicate-named-capturing-groups-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-preset-env, babel-standalone
  • #16445 Add duplicate-named-capturing-groups-regex to preset-env (@​JLHwung)

:bug: Bug Fix

• babel-generator
  • #16678 Print parens around as expressions on the LHS (@​nicolo-ribaudo)

... (truncated)

Commits

• 0f8f408 v7.25.2
• 6a15d7a Ensure that requeueComputedKeyAndDecorators is available (#16695)
• 9f7e29a chore: fix one suppressed eslint error (#16696)
• 2413d1a Add eslint-plugin-regexp (#16680)
• 5dc3b44 Expose wether a module has TLA or not as .extra.async (#16480)
• 30aa644 v7.24.9
• 7d923b8 Avoid require() call in @babel/standalone bundle (#16639)
• 889c58f Revert "Pin CI to Node.js 22.1" (#16633)
• 1f5af44 v7.24.8
• 683c654 Enable some lint rules (#16605)
• Additional commits viewable in compare view

Updates @babel/preset-env from 7.24.7 to 7.25.3

Release notes

Sourced from @​babel/preset-env's releases.

v7.25.3 (2024-07-31)

:bug: Bug Fix

• babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-traverse
  • #16699 Avoid validating visitors produced by traverse.visitors.merge (@​nicolo-ribaudo)

:house: Internal

• babel-parser
  • #16688 Add @babel/types as a dependency of @babel/parser (@​nicolo-ribaudo)

Committers: 2

• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)

v7.25.2 (2024-07-30)

:bug: Bug Fix

• babel-core, babel-traverse
  • #16695 Ensure that requeueComputedKeyAndDecorators is available (@​nicolo-ribaudo)

Committers: 2

• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)

v7.25.1 (2024-07-28)

:bug: Bug Fix

• babel-plugin-transform-function-name
  • #16683 fix: ensureFunctionName may be undefined (@​liuxingbaoyu)
• babel-plugin-transform-react-constant-elements
  • #16582 fix plugin-transform-react-constant-elements transform JSXFrament but not add JSXExpressionContainer (@​keiseiTi)
• babel-traverse
  • #16587 fix: fixed issue16583 + test (@​nerodesu017)

:house: Internal

• #16663 Test eslint plugin against eslint 9 (@​JLHwung)

Committers: 4

• Adrian (@​nerodesu017)
• Huáng Jùnliàng (@​JLHwung)
• @​keiseiTi
• @​liuxingbaoyu

v7.25.0 (2024-07-26)

Thanks @​davidtaylorhq and @​slatereax for your first PR!

You can find the release blog post with some highlights at https://babeljs.io/blog/2024/07/26/7.25.0.

:eyeglasses: Spec Compliance

... (truncated)

Changelog

Sourced from @​babel/preset-env's changelog.

v7.25.3 (2024-07-31)

:bug: Bug Fix

• babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-traverse
  • #16699 Avoid validating visitors produced by traverse.visitors.merge (@​nicolo-ribaudo)

:house: Internal

• babel-parser
  • #16688 Add @babel/types as a dependency of @babel/parser (@​nicolo-ribaudo)

v7.25.2 (2024-07-30)

:bug: Bug Fix

• babel-core, babel-traverse
  • #16695 Ensure that requeueComputedKeyAndDecorators is available (@​nicolo-ribaudo)

v7.25.1 (2024-07-28)

:bug: Bug Fix

• babel-plugin-transform-function-name
  • #16683 fix: ensureFunctionName may be undefined (@​liuxingbaoyu)
• babel-plugin-transform-react-constant-elements
  • #16582 fix plugin-transform-react-constant-elements transform JSXFrament but not add JSXExpressionContainer (@​keiseiTi)
• babel-traverse
  • #16587 fix: fixed issue16583 + test (@​nerodesu017)

:house: Internal

• #16663 Test eslint plugin against eslint 9 (@​JLHwung)

v7.25.0 (2024-07-26)

:eyeglasses: Spec Compliance

• babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3
  • #16537 await using normative updates (@​JLHwung)
• babel-plugin-transform-typescript
  • #16602 Ensure enum members syntactically determinable to be strings do not get reverse mappings (@​liuxingbaoyu)

:rocket: New Feature

• babel-helper-create-class-features-plugin, babel-helper-function-name, babel-helper-plugin-utils, babel-helper-wrap-function, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-preset-env, babel-traverse, babel-types
  • #16658 Move ensureFunctionName to NodePath.prototype (@​nicolo-ribaudo)
• babel-helper-hoist-variables, babel-helper-plugin-utils, babel-plugin-proposal-async-do-expressions, babel-plugin-transform-modules-systemjs, babel-traverse
  • #16644 Move hoistVariables to Scope.prototype (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-split-export-declaration, babel-plugin-transform-classes, babel-traverse, babel-types
  • #16645 Move splitExportDeclaration to NodePath.prototype (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-helper-environment-visitor, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-remap-async-to-generator, babel-helper-replace-supers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-transform-async-generator-functions, babel-plugin-transform-classes, babel-traverse
  • #16649 Move environment-visitor helper into @babel/traverse (@​nicolo-ribaudo)
• babel-core, babel-parser
  • #16480 Expose wether a module has TLA or not as .extra.async (@​nicolo-ribaudo)
• babel-compat-data, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-preset-env
  • #16569 Introduce bugfix-safari-class-field-initializer-scope (@​davidtaylorhq)
• babel-plugin-transform-block-scoping, babel-traverse, babel-types
  • #16551 Add NodePath#getAssignmentIdentifiers (@​JLHwung)
• babel-helper-import-to-platform-api, babel-plugin-proposal-json-modules

... (truncated)

Commits

• 787c7cd v7.25.3
• a0c8871 Test: Improve available-plugins compat-data check (#16693)
• 0f8f408 v7.25.2
• 0b2cc25 Update compat-table (#16691)
• 2413d1a Add eslint-plugin-regexp (#16680)
• d2e3ee2 v7.25.0
• d364545 Move ensureFunctionName to NodePath.prototype (#16658)
• 814b31e Introduce bugfix-safari-class-field-initializer-scope (#16569)
• 46284e4 Add duplicate-named-capturing-groups-regex to preset-env (#16445)
• 482008c Simplify helper-function-name logic (#16652)
• Additional commits viewable in compare view

Updates uglify-js from 3.17.4 to 3.19.1

Release notes

Sourced from uglify-js's releases.

v3.19.1

Features

• simplify nullish comparison of complex expressions (7a4fb85404f44bbf2e4db5892eb32b698bc53b6e)

Bug Fixes

• if statement (fac0aa2b8aca8605835e604afe8b39903cc89b75)
• switch statement (12475763a60ef92fed1cd625bbb0064c347cc84c, fac0aa2b8aca8605835e604afe8b39903cc89b75)

v3.19.0

Features

• eliminate side-effect-free property access (9c80456634550045b51e921e59deb61e4e1dcab7, 95d3ede664598916e6dced8a5e0f5003efd3c77a, 205a1d1f19cfc128018cfd822c3332e6ee0a831f, 124c4d3fe364c825488528f9d90b68cb3b48178d)
• improve hoist_vars efficiency (ce8ef52e2bcad2747b803faad68ab9c78cadf4d9)
• improve compression around built-in function (8c5a899986e7f66cadd76bfcbd7c017e03508d36)
• improve deconstruction of singular destructuring assignment (8c5a899986e7f66cadd76bfcbd7c017e03508d36)

Bug Fixes

• __proto__ accessor (87c9edbbc74e87fc0cd6a6af54890376d6669ddd)
• automatic semicolon insertion (008edfbb26843ead4a7e37e657fdb0953d80c145, 8cfa37ec698c1d7f7c203c43ed62511d6aa7ec29)
• class field (2c731033b04786e1f8662b4a09def0f437a9415c, 0a33da4f76a06cd1c37c0b544e4fa8e92845c622)
• default parameter (6669ea19efaa8f9de2572de5c5f16009cf9114ed)
• delete operator (b6b0658fd6e7c17eed0c2f87bd452a4e0a0da4f4)
• destructuring syntax (f31311e4394a505a041e5401149e4484c8114ec8, 8195a664fd83e7381d0823e01a4ea30dc28e9f0d, ed36c1ec5cd5cd8efb18d43f38cb13de94a93582)
• function call (dc7aa321725a22702cbc4b08ecb9acc7e3042011, 722465b2a032b64ad24bb1822559dd4885332d04)
• immediately invoked function expression (dc51a23d3152b6dd942024cbc6d1d58a136c4e4a)
• property access (6b23899ef376459bc5734574b458cd637343548b)
• spread syntax (23d74bedeb91742cd8bc090cb96812ef99dda0c5)
• try statement (8dc99fa25f72c76e9a587299ca279135341491be, 787dfbed644f5b879ca3ae86828782d7ac1e7c38)
• unary arithmetic operator (fada1a1927ddb770749a9b956cfd6c864e3a79cb)

v3.18.0

Features

• convert const to let when possible (21aff996a5d54730a1b67a51f3e79a89a7abd53f)
• process input as ES module by default (68d62a8a310a67f2c8fb4334f9e210f6fed55d67, 17c3ae6cbabc61c97193de4a56b0be71fc36bfe9)
• concatenate let and var declarations (e5cbd3e0f36afbbd3055c151d5f77561002dc50c)
• avoid mangling of enableHighAccuracy & maximumAge DOM properties (aa7c3389e6853f5a8210da8dc1e189d2d1ad6c46)
• compress array element assignments into declaration (ffe0fe77625d1886d7710a1caf3f3ea600e7d7cc, 3dfb3794865a24e69fb01507f462f3879f13482a)
• handle lexical function declaration in ES6+ (e7b9b4aafbc0ee1196de0a8b76c1015e53181056)
• improve ESTree interoperability with third-party tools (ca4185a0fdae65764cf6d66e6efee6595a7fb542)

Bug Fixes

• assignment operator (f0ca9cfbe65efc919149e7cd74cedd186d6413ee)

... (truncated)

Commits

• 4b86eaf v3.19.1
• fac0aa2 fix corner case in reduce_vars (#5893)
• 1247576 fix corner case in reduce_vars (#5891)
• 7a4fb85 enhance comparisons (#5889)
• da3d86a v3.19.0
• fada1a1 fix corner case in booleans (#5887)
• 722465b fix corner case in inline (#5886)
• b6b0658 fix corner case in dead_code (#5883)
• 8cfa37e fix corner case in semicolons (#5881)
• 008edfb fix corner cases in semicolons (#5879)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

[dependabot[bot]]

The group that created this PR has been removed from your configuration.