socket-security[bot]
commented
5 months ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/@babel/core@7.24.0 | environment, filesystem, unsafe | +52 |
20 MB | |
| npm/@babel/plugin-proposal-decorators@7.24.0 | Transitive: environment, filesystem, unsafe | +61 |
20.5 MB | |
| npm/@babel/plugin-transform-runtime@7.24.0 | unsafe Transitive: environment, filesystem | +65 |
21.5 MB | |
| npm/@babel/preset-env@7.24.0 | environment Transitive: filesystem, unsafe | +160 |
24.5 MB | |
| npm/@babel/runtime@7.24.0 | None | +1 |
290 kB | |
| npm/@types/lodash@4.17.0 | None | 0 |
862 kB | |
| npm/@verdaccio/config@7.0.0-next-7.12 | environment, filesystem Transitive: eval, network, unsafe | +24 |
5.58 MB | |
| npm/@verdaccio/core@7.0.0-next-7.12 | filesystem, network Transitive: environment, eval, unsafe | +14 |
2.84 MB | |
| npm/async@3.2.5 | None | 0 |
808 kB | |
| npm/eslint@8.57.0 | environment, filesystem Transitive: eval, shell, unsafe | +82 |
10 MB | |
| npm/snyk@1.1284.0 | environment, filesystem, network, shell Transitive: eval, unsafe | +32 |
49.3 MB |
🚮 Removed packages: npm/@babel/core@7.23.9, npm/@babel/plugin-proposal-decorators@7.23.9, npm/@babel/plugin-transform-runtime@7.23.9, npm/@babel/preset-env@7.23.9, npm/@babel/runtime@7.23.9, npm/@types/lodash@4.14.202, npm/@verdaccio/config@7.0.0-next-7.9, npm/@verdaccio/core@7.0.0-next-7.9, npm/async@3.2.4, npm/eslint@8.56.0, npm/snyk@1.1280.0
This PR contains the following updates:
7.23.9->7.24.07.23.9->7.24.07.23.9->7.24.07.23.9->7.24.07.23.9->7.24.04.14.202->4.17.07.0.0-next-7.9->7.0.0-next-7.127.0.0-next-7.9->7.0.0-next-7.123.2.4->3.2.58.56.0->8.57.01.1280.0->1.1284.0Release Notes
babel/babel (@babel/core)
### [`v7.24.0`](https://togithub.com/babel/babel/blob/HEAD/CHANGELOG.md#v7240-2024-02-28) [Compare Source](https://togithub.com/babel/babel/compare/v7.23.9...v7.24.0) ##### :rocket: New Feature - `babel-standalone` - [#11696](https://togithub.com/babel/babel/pull/11696) Export babel tooling packages in `@babel/standalone` ([@ajihyf](https://togithub.com/ajihyf)) - `babel-core`, `babel-helper-create-class-features-plugin`, `babel-helpers`, `babel-plugin-transform-class-properties` - [#16267](https://togithub.com/babel/babel/pull/16267) Implement `noUninitializedPrivateFieldAccess` assumption ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helper-create-class-features-plugin`, `babel-helpers`, `babel-plugin-proposal-decorators`, `babel-plugin-proposal-pipeline-operator`, `babel-plugin-syntax-decorators`, `babel-plugin-transform-class-properties`, `babel-runtime-corejs2`, `babel-runtime-corejs3`, `babel-runtime` - [#16242](https://togithub.com/babel/babel/pull/16242) Support decorator 2023-11 normative updates ([@JLHwung](https://togithub.com/JLHwung)) - `babel-preset-flow` - [#16309](https://togithub.com/babel/babel/pull/16309) \[babel 7] Allow setting `ignoreExtensions` in Flow preset ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - [#16284](https://togithub.com/babel/babel/pull/16284) Add `experimental_useHermesParser` option in `preset-flow` ([@liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-helper-import-to-platform-api`, `babel-plugin-proposal-import-wasm-source`, `babel-plugin-proposal-json-modules`, `babel-standalone` - [#16172](https://togithub.com/babel/babel/pull/16172) Add transform support for JSON modules imports ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-plugin-transform-runtime` - [#16241](https://togithub.com/babel/babel/pull/16241) Add back `moduleName` option to `@babel/plugin-transform-runtime` ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-parser`, `babel-types` - [#16277](https://togithub.com/babel/babel/pull/16277) Allow import attributes for `TSImportType` ([@sosukesuzuki](https://togithub.com/sosukesuzuki)) ##### :bug: Bug Fix - `babel-plugin-proposal-do-expressions`, `babel-traverse` - [#16305](https://togithub.com/babel/babel/pull/16305) fix: avoid `popContext` on unvisited node paths ([@JLHwung](https://togithub.com/JLHwung)) - `babel-helper-create-class-features-plugin`, `babel-plugin-transform-private-methods`, `babel-plugin-transform-private-property-in-object` - [#16312](https://togithub.com/babel/babel/pull/16312) Fix class private properties when `privateFieldsAsSymbols` ([@liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-helper-create-class-features-plugin`, `babel-plugin-transform-private-methods` - [#16307](https://togithub.com/babel/babel/pull/16307) Fix the support of `arguments` in private `get/set` method ([@liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-helper-create-class-features-plugin`, `babel-helpers`, `babel-plugin-proposal-decorators` - [#16287](https://togithub.com/babel/babel/pull/16287) Reduce decorator static property size ([@liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-helper-create-class-features-plugin`, `babel-plugin-proposal-decorators` - [#16281](https://togithub.com/babel/babel/pull/16281) Fix evaluation order of decorators with cached receiver ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - [#16279](https://togithub.com/babel/babel/pull/16279) Fix decorator this memoization ([@JLHwung](https://togithub.com/JLHwung)) - [#16266](https://togithub.com/babel/babel/pull/16266) Preserve `static` on decorated private `accessor` ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - [#16258](https://togithub.com/babel/babel/pull/16258) fix: handle decorated async private method and generator ([@JLHwung](https://togithub.com/JLHwung)) - `babel-helper-create-class-features-plugin`, `babel-plugin-proposal-decorators`, `babel-plugin-transform-async-generator-functions`, `babel-plugin-transform-private-methods`, `babel-plugin-transform-private-property-in-object`, `babel-plugin-transform-typescript`, `babel-preset-env` - [#16275](https://togithub.com/babel/babel/pull/16275) Fix class private properties when `privateFieldsAsProperties` ([@liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-helpers` - [#16268](https://togithub.com/babel/babel/pull/16268) Do not consider `arguments` in a helper as a global reference ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helpers`, `babel-plugin-proposal-decorators` - [#16270](https://togithub.com/babel/babel/pull/16270) Handle symbol key class elements decoration ([@JLHwung](https://togithub.com/JLHwung)) - [#16265](https://togithub.com/babel/babel/pull/16265) Do not define `access.get` for public setter decorators ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) ##### :nail_care: Polish - `babel-core`, `babel-helper-create-class-features-plugin`, `babel-preset-env` - [#12428](https://togithub.com/babel/babel/pull/12428) Suggest using `BABEL_SHOW_CONFIG_FOR` for config problems ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) ##### :house: Internal - `babel-helper-transform-fixture-test-runner` - [#16278](https://togithub.com/babel/babel/pull/16278) Continue writing `output.js` when `exec.js` throws ([@liuxingbaoyu](https://togithub.com/liuxingbaoyu)) ##### :microscope: Output optimization - `babel-helper-create-class-features-plugin`, `babel-plugin-proposal-decorators` - [#16306](https://togithub.com/babel/babel/pull/16306) Avoid intermediate functions for private accessors with decs ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helper-create-class-features-plugin`, `babel-helpers`, `babel-plugin-proposal-decorators`, `babel-plugin-proposal-pipeline-operator`, `babel-plugin-transform-class-properties` - [#16294](https://togithub.com/babel/babel/pull/16294) More aggressively inline decorators in the static block ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helper-create-class-features-plugin`, `babel-helpers`, `babel-plugin-transform-private-methods` - [#16283](https://togithub.com/babel/babel/pull/16283) Do not use `classPrivateMethodGet` ([@liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-helper-create-class-features-plugin`, `babel-helpers`, `babel-plugin-proposal-decorators` - [#16287](https://togithub.com/babel/babel/pull/16287) Reduce decorator static property size ([@liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-helper-create-class-features-plugin`, `babel-plugin-proposal-decorators`, `babel-plugin-transform-class-properties` - [#16280](https://togithub.com/babel/babel/pull/16280) Reduce element decorator temp variables ([@JLHwung](https://togithub.com/JLHwung)) - `babel-helper-create-class-features-plugin`, `babel-helper-fixtures`, `babel-helpers`, `babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining`, `babel-plugin-proposal-decorators`, `babel-plugin-proposal-destructuring-private`, `babel-plugin-proposal-optional-chaining-assign`, `babel-plugin-transform-class-properties`, `babel-plugin-transform-class-static-block`, `babel-plugin-transform-private-methods`, `babel-plugin-transform-private-property-in-object`, `babel-preset-env`, `babel-runtime-corejs2`, `babel-runtime-corejs3`, `babel-runtime` - [#16261](https://togithub.com/babel/babel/pull/16261) Do not use descriptors for private class elements ([@nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helpers`, `babel-plugin-proposal-decorators` - [#16263](https://togithub.com/babel/babel/pull/16263) Reduce helper size for decorator 2023-11 ([@liuxingbaoyu](https://togithub.com/liuxingbaoyu))verdaccio/verdaccio (@verdaccio/config)
### [`v7.0.0-next-7.12`](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/config@7.0.0-next-7.11...@verdaccio/config@7.0.0-next-7.12) [Compare Source](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/config@7.0.0-next-7.11...@verdaccio/config@7.0.0-next-7.12) ### [`v7.0.0-next-7.11`](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/config@7.0.0-next-7.10...@verdaccio/config@7.0.0-next-7.11) [Compare Source](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/config@7.0.0-next-7.10...@verdaccio/config@7.0.0-next-7.11) ### [`v7.0.0-next-7.10`](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/config@7.0.0-next-7.9...@verdaccio/config@7.0.0-next-7.10) [Compare Source](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/config@7.0.0-next-7.9...@verdaccio/config@7.0.0-next-7.10)verdaccio/verdaccio (@verdaccio/core)
### [`v7.0.0-next-7.12`](https://togithub.com/verdaccio/verdaccio/blob/HEAD/packages/core/core/CHANGELOG.md#700-next-712) [Compare Source](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/core@7.0.0-next-7.11...@verdaccio/core@7.0.0-next-7.12) ### [`v7.0.0-next-7.11`](https://togithub.com/verdaccio/verdaccio/blob/HEAD/packages/core/core/CHANGELOG.md#700-next-711) [Compare Source](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/core@7.0.0-next-7.10...@verdaccio/core@7.0.0-next-7.11) ### [`v7.0.0-next-7.10`](https://togithub.com/verdaccio/verdaccio/blob/HEAD/packages/core/core/CHANGELOG.md#700-next-710) [Compare Source](https://togithub.com/verdaccio/verdaccio/compare/@verdaccio/core@7.0.0-next-7.9...@verdaccio/core@7.0.0-next-7.10)caolan/async (async)
### [`v3.2.5`](https://togithub.com/caolan/async/blob/HEAD/CHANGELOG.md#v325) [Compare Source](https://togithub.com/caolan/async/compare/v3.2.4...v3.2.5) - Ensure `Error` objects such as `AggregateError` are propagated without modification ([#1920](https://togithub.com/caolan/async/issues/1920))eslint/eslint (eslint)
### [`v8.57.0`](https://togithub.com/eslint/eslint/releases/tag/v8.57.0) [Compare Source](https://togithub.com/eslint/eslint/compare/v8.56.0...v8.57.0) #### Features - [`1120b9b`](https://togithub.com/eslint/eslint/commit/1120b9b7b97f10f059d8b7ede19de2572f892366) feat: Add loadESLint() API method for v8 ([#18098](https://togithub.com/eslint/eslint/issues/18098)) (Nicholas C. Zakas) - [`dca7d0f`](https://togithub.com/eslint/eslint/commit/dca7d0f1c262bc72310147bcefe1d04ecf60acbc) feat: Enable `eslint.config.mjs` and `eslint.config.cjs` ([#18066](https://togithub.com/eslint/eslint/issues/18066)) (Nitin Kumar) #### Bug Fixes - [`2196d97`](https://togithub.com/eslint/eslint/commit/2196d97094ba94d6d750828879a29538d1600de5) fix: handle absolute file paths in `FlatRuleTester` ([#18064](https://togithub.com/eslint/eslint/issues/18064)) (Nitin Kumar) - [`69dd1d1`](https://togithub.com/eslint/eslint/commit/69dd1d1387b7b53617548d1f9f2c149f179e6e17) fix: Ensure config keys are printed for config errors ([#18067](https://togithub.com/eslint/eslint/issues/18067)) (Nitin Kumar) - [`9852a31`](https://togithub.com/eslint/eslint/commit/9852a31edcf054bd5d15753ef18e2ad3216b1b71) fix: deep merge behavior in flat config ([#18065](https://togithub.com/eslint/eslint/issues/18065)) (Nitin Kumar) - [`4c7e9b0`](https://togithub.com/eslint/eslint/commit/4c7e9b0b539ba879ac1799e81f3b6add2eed4b2f) fix: allow circular references in config ([#18056](https://togithub.com/eslint/eslint/issues/18056)) (Milos Djermanovic) #### Documentation - [`84922d0`](https://togithub.com/eslint/eslint/commit/84922d0bfa10689a34a447ab8e55975ff1c1c708) docs: Show prerelease version in dropdown ([#18139](https://togithub.com/eslint/eslint/issues/18139)) (Nicholas C. Zakas) - [`5b8c363`](https://togithub.com/eslint/eslint/commit/5b8c3636a3d7536535a6878eca0e5b773e4829d4) docs: Switch to Ethical Ads ([#18117](https://togithub.com/eslint/eslint/issues/18117)) (Milos Djermanovic) - [`77dbfd9`](https://togithub.com/eslint/eslint/commit/77dbfd9887b201a46fc68631cbde50c08e1a8dbf) docs: show NEXT in version selectors ([#18052](https://togithub.com/eslint/eslint/issues/18052)) (Milos Djermanovic) #### Chores - [`1813aec`](https://togithub.com/eslint/eslint/commit/1813aecc4660582b0678cf32ba466eb9674266c4) chore: upgrade [@eslint/js](https://togithub.com/eslint/js)[@8](https://togithub.com/8).57.0 ([#18143](https://togithub.com/eslint/eslint/issues/18143)) (Milos Djermanovic) - [`5c356bb`](https://togithub.com/eslint/eslint/commit/5c356bb0c6f53c570224f8e9f02c4baca8fc6d2f) chore: package.json update for [@eslint/js](https://togithub.com/eslint/js) release (Jenkins) - [`f4a1fe2`](https://togithub.com/eslint/eslint/commit/f4a1fe2e45aa1089fe775290bf530de82f34bf16) test: add more tests for ignoring files and directories ([#18068](https://togithub.com/eslint/eslint/issues/18068)) (Nitin Kumar) - [`42c0aef`](https://togithub.com/eslint/eslint/commit/42c0aefaf6ea8b998b1c6db61906a79c046d301a) ci: Enable CI for `v8.x` branch ([#18047](https://togithub.com/eslint/eslint/issues/18047)) (Milos Djermanovic)snyk/snyk (snyk)
### [`v1.1284.0`](https://togithub.com/snyk/cli/releases/tag/v1.1284.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1283.1...v1.1284.0) ##### Features - support -dverbose argument when testing maven projects [#5117](https://togithub.com/snyk/snyk/issues/5117) ([1ef091f](https://togithub.com/snyk/snyk/commit/1ef091fab322e03b51397633d88fb635b92ecb89)) ### [`v1.1283.1`](https://togithub.com/snyk/cli/releases/tag/v1.1283.1) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1283.0...v1.1283.1) ##### Bug Fixes - **ci:** End to end test by updating to a newer test image ([#5115](https://togithub.com/snyk/snyk/issues/5115)) ([93b4fcb](https://togithub.com/snyk/snyk/commit/93b4fcb10b3768a59993b8ee29698b84fd8b1ef4)) - fix add support for dev/alpha/beta/rc python versions ([#5106](https://togithub.com/snyk/snyk/issues/5106)) ([bd6351a](https://togithub.com/snyk/snyk/commit/bd6351aa33369407d22835460d6e2c0128f13cb4)), closes [#5108](https://togithub.com/snyk/snyk/issues/5108) [#5107](https://togithub.com/snyk/snyk/issues/5107) ### [`v1.1283.0`](https://togithub.com/snyk/cli/releases/tag/v1.1283.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1282.1...v1.1283.0) ##### Features - add python optional dependencies support ([#5072](https://togithub.com/snyk/snyk/issues/5072)) ([e52fdaa](https://togithub.com/snyk/snyk/commit/e52fdaab6158ccf196c58b18e6665919376df982)) ### [`v1.1282.1`](https://togithub.com/snyk/cli/releases/tag/v1.1282.1) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1282.0...v1.1282.1) ##### Bug Fixes - **ci:** upgrade slack webhook ([#5085](https://togithub.com/snyk/snyk/issues/5085)) ([9f4d512](https://togithub.com/snyk/snyk/commit/9f4d512c96401e4b163844ad5743f3ee244a999a)) - **danger:** commit pattern in danger to disable certain characters ([#5089](https://togithub.com/snyk/snyk/issues/5089)) ([2113022](https://togithub.com/snyk/snyk/commit/211302214ad864a464dec78191f5cc0e3619b649)) - enforce correct type for security-severity in sarif output ([#5091](https://togithub.com/snyk/snyk/issues/5091)) ([f0c8339](https://togithub.com/snyk/snyk/commit/f0c83391cb29c8f4eee190e953b0b7d357ae0cb7)) - remove dependencies when parent folder is deleted ([#5080](https://togithub.com/snyk/snyk/issues/5080)) ([4f892f7](https://togithub.com/snyk/snyk/commit/4f892f75662f5898f035e16bbea697201afc0f33)) ### [`v1.1282.0`](https://togithub.com/snyk/cli/releases/tag/v1.1282.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1281.0...v1.1282.0) ##### Bug Fixes - enables multi-platform support for OCI images ([#5082](https://togithub.com/snyk/snyk/issues/5082)) ([00af20b](https://togithub.com/snyk/snyk/commit/00af20b02234205e19231f975fc7b275bb3e37ab)) ##### Features - populate CVSS scores in SARIF files ([#5014](https://togithub.com/snyk/snyk/issues/5014)) ([#5088](https://togithub.com/snyk/snyk/issues/5088)) ([54253f7](https://togithub.com/snyk/snyk/commit/54253f748d5df0c8ac01971d994bc58eeac44aa0)) ### [`v1.1281.0`](https://togithub.com/snyk/cli/releases/tag/v1.1281.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1280.1...v1.1281.0) ##### Bug Fixes - do not purge the code action cache in language server before the action is resolved by the client \[IDE-134] ([#5062](https://togithub.com/snyk/snyk/issues/5062)) ([4bf4333](https://togithub.com/snyk/snyk/commit/4bf4333d67145de8b2c1c314d610ec0e01166089)) - support monitoring larger/complex container projects ([#5075](https://togithub.com/snyk/snyk/issues/5075)) ([091e277](https://togithub.com/snyk/snyk/commit/091e277562e4de9fc74fb7207a209df05c8a6d1b)) - upgrade go toolchain to 1.21.7 ([#5064](https://togithub.com/snyk/snyk/issues/5064)) ([f282bb5](https://togithub.com/snyk/snyk/commit/f282bb5c7091c9f48da0e6c0c7347a27d5cb7d2c)) ##### Features - add dataflow to code issue data \[IDE-134] ([#5076](https://togithub.com/snyk/snyk/issues/5076)) ([6545bec](https://togithub.com/snyk/snyk/commit/6545bec6a9ff103e952e120ba25eb2e44cf26d15)) - provide easy way to update snyk-ls in CLI \[IDE-144] ([#5067](https://togithub.com/snyk/snyk/issues/5067)) ([e9723af](https://togithub.com/snyk/snyk/commit/e9723af295438e680f44aae128951d17073bfc25)) ### [`v1.1280.1`](https://togithub.com/snyk/cli/releases/tag/v1.1280.1) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1280.0...v1.1280.1) ##### Bug Fixes - add range to snyk.scan message create by code scanner \[IDE-134] ([#5052](https://togithub.com/snyk/snyk/issues/5052)) ([e78bad6](https://togithub.com/snyk/snyk/commit/e78bad6039161f3f7184c46bcc3fff3c84dd4182)) - Scanning of .NET projects with the `--dotnet-runtime-resolution` flag now uses existing NuGet package cache if available ([#5051](https://togithub.com/snyk/snyk/issues/5051)) ([023f633](https://togithub.com/snyk/snyk/commit/023f633364edd0bca4d8d10e490b2aea65478bd9))Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.