This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Name | Versions | Released on
:-------------|:-------------|:-------------
**@babel/core**from 7.4.5 to 7.19.3 | **83 versions** ahead of your current version | **a month ago**on 2022-09-27
**@babel/preset-env**from 7.4.5 to 7.19.4 | **75 versions** ahead of your current version | **21 days ago**on 2022-10-10
**@babel/preset-react**from 7.0.0 to 7.18.6 | **23 versions** ahead of your current version | **4 months ago**on 2022-06-27
The recommended version fixes:
Severity | Issue | PriorityScore (*) | Exploit Maturity |
:-------------------------:|:-------------------------|-------------------------|:-------------------------
| Regular Expression Denial of Service (ReDoS) [SNYK-JS-PATHPARSE-1077067](https://snyk.io/vuln/SNYK-JS-PATHPARSE-1077067) | **372/1000** **Why?** Proof of Concept exploit, CVSS 5.3 | Proof of Concept
| Regular Expression Denial of Service (ReDoS) [SNYK-JS-BROWSERSLIST-1090194](https://snyk.io/vuln/SNYK-JS-BROWSERSLIST-1090194) | **372/1000** **Why?** Proof of Concept exploit, CVSS 5.3 | Proof of Concept
(*) Note that the real score may have changed since the PR was raised.
Release notes Package name: @babel/core
from @babel/preset-react GitHub release notes
**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.*
For more information:
🧐 [View latest project report](https://app.snyk.io/org/jeremy-donson/project/e282be0b-eaae-4798-8b0a-6e0d719bee92?utm_source=github&utm_medium=referral&page=upgrade-pr)
🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/jeremy-donson/project/e282be0b-eaae-4798-8b0a-6e0d719bee92/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr)
🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/jeremy-donson/project/e282be0b-eaae-4798-8b0a-6e0d719bee92/settings/integration?pkg=@babel/core&pkg=@babel/preset-env&pkg=@babel/preset-react&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together. :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project. Name | Versions | Released on :-------------|:-------------|:------------- **@babel/core**from 7.4.5 to 7.19.3 | **83 versions** ahead of your current version | **a month ago**on 2022-09-27 **@babel/preset-env**from 7.4.5 to 7.19.4 | **75 versions** ahead of your current version | **21 days ago**on 2022-10-10 **@babel/preset-react**from 7.0.0 to 7.18.6 | **23 versions** ahead of your current version | **4 months ago**on 2022-06-27 The recommended version fixes: Severity | Issue | PriorityScore (*) | Exploit Maturity | :-------------------------:|:-------------------------|-------------------------|:-------------------------[SNYK-JS-PATHPARSE-1077067](https://snyk.io/vuln/SNYK-JS-PATHPARSE-1077067) | **372/1000**
**Why?** Proof of Concept exploit, CVSS 5.3 | Proof of Concept
[SNYK-JS-BROWSERSLIST-1090194](https://snyk.io/vuln/SNYK-JS-BROWSERSLIST-1090194) | **372/1000**
**Why?** Proof of Concept exploit, CVSS 5.3 | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: @babel/core
-
7.19.3 - 2022-09-27
🐛 Bug Fix
- #8566 Correctly update bindings of decorated class declarations (@ nicolo-ribaudo)
- #14974 fix: Normal parsing of
- #14941 fix: Support local exports in TS
- #14940 fix: allow ts redeclaration with
- #14962 Fix printing of Flow internal slot functions (@ liuxingbaoyu)
- #14950 Emit
- #14946 fix: ts exported vars are shadowed by
💅 Polish
- #14954 Optional filename when preset uses fn test/include/exclude (@ nicolo-ribaudo)
🏠 Internal
- #14961 chore: use
🔬 Output optimization
- #14952 [ts] remove nested
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
-
7.19.1 - 2022-09-14
🐛 Bug Fix
- #14930 Avoid fancy stack traces size computation (@ nicolo-ribaudo)
- #14932 fix: isForAwaitStatement is broken (@ JLHwung)
- Other
- #14872 Use the built-in class fields and private methods rules in ESLint 8 (@ JLHwung)
- #14920 [estree] attach comments after directives at the end of file (@ hegemonic)
- #14900 [ts] allow redeclaring a var/type with the same name as import (@ liuxingbaoyu)
- #14913 fix: do not remove type import used in TS import= (@ JLHwung)
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Jeff Williams (@ hegemonic)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
-
7.19.0 - 2022-09-05
👓 Spec Compliance
- #14666 Support private name in decorator member expression (@ JLHwung)
- #14877 Remove one promise tick in yield* (tc39/ecma262#2819) (@ nicolo-ribaudo)
🚀 New Feature
- #14836 Add 2022-03 decorators version (stage 3) (@ nicolo-ribaudo)
- #14695 [parser] Make
- #14744 Default to hash syntax for Record&Tuple (@ nicolo-ribaudo)
- #14867 feat: add proposal-record-and-tuple to standalone (@ JLHwung)
- #14805 Add support for the duplicate named capturing groups proposal (@ nicolo-ribaudo)
🐛 Bug Fix
- #14897 Fix: class transform should not drop method definition when key contains non-BMP characters (@ JLHwung)
- #14890 fix: TS plugin shouldn't remove
- #14819 fix: parse
- #14886 Fix helper-builder-react-jsx compat with Babel 7.9 (@ JLHwung)
💅 Polish
- #11612 Make error message prefixes more descriptive (@ eps1lon)
- #11554 Hide internal
📝 Documentation
- #14895 docs: remove david-dm from README (@ SukkaW)
🏠 Internal
- #14863 ship @ babel/standalone source maps (@ JLHwung)
- #14880 Update typescript to 4.8 (@ JLHwung)
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sebastian Silbermann (@ eps1lon)
- Sukka (@ SukkaW)
- @ liuxingbaoyu
-
7.18.13 - 2022-08-22
🐛 Bug Fix
- #14869 fix: jsx with
- #14843 Fix a race condition in
- #14841 fix: Destructuring exceptions in nested
💅 Polish
- #14833 Let
- #14837 Add support for static evaluation of ?? operator (@ djpohly)
🏠 Internal
- #14846 fix: Print build logs correctly (@ liuxingbaoyu)
- Babel Bot (@ babel-bot)
- Devin J. Pohly (@ djpohly)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
-
7.18.10 - 2022-08-01 Read more
-
7.18.9 - 2022-07-18
-
7.18.6 - 2022-06-27
-
7.18.5 - 2022-06-13
-
7.18.2 - 2022-05-25
-
7.18.0 - 2022-05-19
-
7.17.12 - 2022-05-16
-
7.17.10 - 2022-04-29
-
7.17.9 - 2022-04-06
-
7.17.8 - 2022-03-18
-
7.17.7 - 2022-03-14
-
7.17.5 - 2022-02-17
-
7.17.4 - 2022-02-15
-
7.17.3 - 2022-02-15
-
7.17.2 - 2022-02-08
-
7.17.0 - 2022-02-02
-
7.16.12 - 2022-01-22
-
7.16.10 - 2022-01-19
-
7.16.7 - 2021-12-31
-
7.16.5 - 2021-12-13
-
7.16.0 - 2021-10-29
-
7.15.8 - 2021-10-06
-
7.15.5 - 2021-09-04
-
7.15.4 - 2021-09-02
-
7.15.0 - 2021-08-04
-
7.14.8 - 2021-07-20
-
7.14.6 - 2021-06-14
-
7.14.5 - 2021-06-09
-
7.14.3 - 2021-05-17
-
7.14.2 - 2021-05-12
-
7.14.0 - 2021-04-29
-
7.13.16 - 2021-04-20
-
7.13.15 - 2021-04-08
-
7.13.14 - 2021-03-29
-
7.13.13 - 2021-03-26
-
7.13.10 - 2021-03-08
-
7.13.8 - 2021-02-26
-
7.13.1 - 2021-02-23
-
7.13.0 - 2021-02-22
-
7.12.17 - 2021-02-18
-
7.12.16 - 2021-02-11
-
7.12.13 - 2021-02-03
-
7.12.10 - 2020-12-09
-
7.12.9 - 2020-11-24
-
7.12.8 - 2020-11-23
-
7.12.7 - 2020-11-20
-
7.12.3 - 2020-10-16
-
7.12.1 - 2020-10-15
-
7.12.0 - 2020-10-14
-
7.11.6 - 2020-09-03
-
7.11.5 - 2020-08-31
-
7.11.4 - 2020-08-20
-
7.11.1 - 2020-08-04
-
7.11.0 - 2020-07-30
-
7.10.5 - 2020-07-14
-
7.10.4 - 2020-06-30
-
7.10.3 - 2020-06-19
-
7.10.2 - 2020-05-30
-
7.10.1 - 2020-05-27
-
7.10.0 - 2020-05-26
-
7.9.6 - 2020-04-29
-
7.9.0 - 2020-03-20
-
7.8.7 - 2020-03-05
-
7.8.6 - 2020-02-27
-
7.8.4 - 2020-01-30
-
7.8.3 - 2020-01-13
-
7.8.0 - 2020-01-12
-
7.7.7 - 2019-12-19
-
7.7.5 - 2019-12-06
-
7.7.4 - 2019-11-22
-
7.7.2 - 2019-11-06
-
7.7.0 - 2019-11-05
-
7.6.4 - 2019-10-10
-
7.6.3 - 2019-10-08
-
7.6.2 - 2019-09-23
-
7.6.0 - 2019-09-06
-
7.5.5 - 2019-07-17
-
7.5.4 - 2019-07-09
-
7.5.0 - 2019-07-04
-
7.4.5 - 2019-05-21
from @babel/core GitHub release notesv7.19.3 (2022-09-27)
babel-plugin-proposal-decoratorsbabel-parserJSXTextfollowingJSXSpreadChild(@ liuxingbaoyu)declare modules (@ liuxingbaoyu)import =andvar(@ liuxingbaoyu)babel-generatorbabel-cli@ babel/clisource maps based on configuration files (@ liuxingbaoyu)babel-plugin-transform-typescriptdeclare(@ liuxingbaoyu)babel-corebabel-helper-compilation-targets,babel-helper-transform-fixture-test-runner,babel-parser,babel-preset-env,babel-traversec8for coverage testing (@ liuxingbaoyu)babel-plugin-transform-typescriptdeclare namespace(@ liuxingbaoyu)Committers: 4
v7.19.1 (2022-09-14)
Thanks @ hegemonic for your first PR!
babel-corebabel-traversebabel-parserbabel-plugin-transform-typescriptCommitters: 5
v7.19.0 (2022-09-05)
Blog post: https://babeljs.io/blog/2022/09/05/7.19.0
Thanks @ SukkaW for your first PR!
babel-parserbabel-helpers,babel-plugin-proposal-async-generator-functions,babel-preset-env,babel-runtime-corejs2,babel-runtime-corejs3,babel-runtimebabel-generator,babel-helpers,babel-parser,babel-plugin-proposal-decorators,babel-plugin-syntax-decorators,babel-runtime-corejs2,babel-runtime-corejs3,babel-runtimebabel-parserdecoratorsBeforeExportdefault tofalse(@ nicolo-ribaudo)babel-generator,babel-parserbabel-standalonebabel-helper-create-regexp-features-plugin,babel-helpers,babel-plugin-proposal-duplicate-named-capturing-groups-regex,babel-plugin-transform-named-capturing-groups-regex,babel-standalonebabel-helper-function-name,babel-helper-wrap-function,babel-plugin-transform-classesbabel-plugin-transform-typescript#privateField!(@ liuxingbaoyu)babel-parsera<b>>>casa<(b>>>c)(@ JLHwung)babel-helper-builder-react-jsxbabel-core@ babel/corefunctions in config errors (@ nicolo-ribaudo)babel-standalonebabel-core,babel-parser,babel-traverseCommitters: 6
v7.18.13 (2022-08-22)
Thanks @ djpohly for your first PR!
babel-generatorretainLines(@ liuxingbaoyu)babel-core@ babel/core(@ JLHwung)babel-plugin-transform-destructuringforexpressions (@ liuxingbaoyu)babel-traversepath.remove()removeIfStatement.alternate(@ djpohly)Committers: 5
Package name: @babel/preset-env
-
7.19.4 - 2022-10-10 Read more
-
7.19.3 - 2022-09-27
🐛 Bug Fix
- #8566 Correctly update bindings of decorated class declarations (@ nicolo-ribaudo)
- #14974 fix: Normal parsing of
- #14941 fix: Support local exports in TS
- #14940 fix: allow ts redeclaration with
- #14962 Fix printing of Flow internal slot functions (@ liuxingbaoyu)
- #14950 Emit
- #14946 fix: ts exported vars are shadowed by
💅 Polish
- #14954 Optional filename when preset uses fn test/include/exclude (@ nicolo-ribaudo)
🏠 Internal
- #14961 chore: use
🔬 Output optimization
- #14952 [ts] remove nested
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
-
7.19.1 - 2022-09-14 Read more
-
7.19.0 - 2022-09-05 Read more
-
7.18.10 - 2022-08-01
-
7.18.9 - 2022-07-18
-
7.18.6 - 2022-06-27
-
7.18.2 - 2022-05-25
-
7.18.0 - 2022-05-19
-
7.17.12 - 2022-05-16
-
7.17.10 - 2022-04-29
-
7.16.11 - 2022-01-20
-
7.16.10 - 2022-01-19
-
7.16.8 - 2022-01-10
-
7.16.7 - 2021-12-31
-
7.16.5 - 2021-12-13
-
7.16.4 - 2021-11-16
-
7.16.0 - 2021-10-29
-
7.15.8 - 2021-10-06
-
7.15.6 - 2021-09-09
-
7.15.4 - 2021-09-02
-
7.15.0 - 2021-08-04
-
7.14.9 - 2021-08-01
-
7.14.8 - 2021-07-20
-
7.14.7 - 2021-06-21
-
7.14.5 - 2021-06-09
-
7.14.4 - 2021-05-28
-
7.14.2 - 2021-05-12
-
7.14.1 - 2021-05-04
-
7.14.0 - 2021-04-29
-
7.13.15 - 2021-04-08
-
7.13.12 - 2021-03-22
-
7.13.10 - 2021-03-08
-
7.13.9 - 2021-03-01
-
7.13.8 - 2021-02-26
-
7.13.5 - 2021-02-23
-
7.13.0 - 2021-02-22
-
7.12.17 - 2021-02-18
-
7.12.16 - 2021-02-11
-
7.12.13 - 2021-02-03
-
7.12.11 - 2020-12-15
-
7.12.10 - 2020-12-09
-
7.12.7 - 2020-11-20
-
7.12.1 - 2020-10-15
-
7.12.0 - 2020-10-14
-
7.11.5 - 2020-08-31
-
7.11.0 - 2020-07-30
-
7.10.4 - 2020-06-30
-
7.10.3 - 2020-06-19
-
7.10.2 - 2020-05-30
-
7.10.1 - 2020-05-27
-
7.10.0 - 2020-05-26
-
7.9.6 - 2020-04-29
-
7.9.5 - 2020-04-07
-
7.9.0 - 2020-03-20
-
7.8.7 - 2020-03-05
-
7.8.6 - 2020-02-27
-
7.8.4 - 2020-01-30
-
7.8.3 - 2020-01-13
-
7.8.2 - 2020-01-12
-
7.8.0 - 2020-01-12
-
7.7.7 - 2019-12-19
-
7.7.6 - 2019-12-07
-
7.7.5 - 2019-12-06
-
7.7.4 - 2019-11-22
-
7.7.1 - 2019-11-05
-
7.7.0 - 2019-11-05
-
7.6.3 - 2019-10-08
-
7.6.2 - 2019-09-23
-
7.6.0 - 2019-09-06
-
7.5.5 - 2019-07-17
-
7.5.4 - 2019-07-09
-
7.5.3 - 2019-07-09
-
7.5.2 - 2019-07-08
-
7.5.0 - 2019-07-04
-
7.4.5 - 2019-05-21
from @babel/preset-env GitHub release notesv7.19.3 (2022-09-27)
babel-plugin-proposal-decoratorsbabel-parserJSXTextfollowingJSXSpreadChild(@ liuxingbaoyu)declare modules (@ liuxingbaoyu)import =andvar(@ liuxingbaoyu)babel-generatorbabel-cli@ babel/clisource maps based on configuration files (@ liuxingbaoyu)babel-plugin-transform-typescriptdeclare(@ liuxingbaoyu)babel-corebabel-helper-compilation-targets,babel-helper-transform-fixture-test-runner,babel-parser,babel-preset-env,babel-traversec8for coverage testing (@ liuxingbaoyu)babel-plugin-transform-typescriptdeclare namespace(@ liuxingbaoyu)Committers: 4
Package name: @babel/preset-react
-
7.18.6 - 2022-06-27
-
7.17.12 - 2022-05-16
-
7.16.7 - 2021-12-31
-
7.16.5 - 2021-12-13
-
7.16.0 - 2021-10-29
-
7.14.5 - 2021-06-09
-
7.13.13 - 2021-03-26
-
7.12.13 - 2021-02-03
-
7.12.10 - 2020-12-09
-
7.12.7 - 2020-11-20
-
7.12.5 - 2020-11-03
-
7.12.1 - 2020-10-15
-
7.10.4 - 2020-06-30
-
7.10.1 - 2020-05-27
-
7.10.0 - 2020-05-26
-
7.9.4 - 2020-03-24
-
7.9.1 - 2020-03-20
-
7.9.0 - 2020-03-20
-
7.8.3 - 2020-01-13
-
7.8.0 - 2020-01-12
-
7.7.4 - 2019-11-22
-
7.7.0 - 2019-11-05
-
7.6.3 - 2019-10-08
-
7.0.0 - 2018-08-27
from @babel/preset-react GitHub release notes**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: