[Snyk] Upgrade @babel/preset-env from 7.4.5 to 7.6.2 #15

snyk-bot · 2019-10-05T02:31:29Z

Snyk has created this PR to upgrade @babel/preset-env from 7.4.5 to 7.6.2.

The recommended version is 7 versions ahead of your current version.
The recommended version was released 11 days ago, on 2019-09-23.

The recommended version fixes:

Severity	Title	Issue ID
	Prototype Pollution	SNYK-JS-LODASH-450202
	Prototype Pollution	SNYK-JS-MIXINDEEP-450212
	Prototype Pollution	SNYK-JS-SETVALUE-450213
	Prototype Pollution	SNYK-JS-SETVALUE-450213
	Denial of Service (DoS)	SNYK-JS-AXIOS-174505

Release notes

7.6.2 - 2019-09-23
v7.6.2 (2019-09-23)

Thanks to @FND, @guywaldman, @vivek12345, @TomerAberbach, @ivandevp and @gonzarodriguezt for their first PRs!

👓 Spec Compliance
- babel-parser
  - #10472 added check to disallow super.private variable access and test case added. (@vivek12345)
  - #10468 [parser] Disallow numeric separator in unicode scape sequences. (@ivandevp)
  - #10467 [parser] Invalid NonOctal Decimal. (@gonzarodriguezt)
  - #10461 [parser] Disallow static fields named constructor. (@guywaldman)
  - #10455 [parser] Report escapes in kws only if they won't be used as identifiers. (@nicolo-ribaudo)
🐛 Bug Fix
- babel-parser
  - #10445 Leave trailing comments after handling a possible trailing comma. (@nicolo-ribaudo)
- babel-cli
  - #10400 fix: allow the process to exit naturally. (@JLHwung)
- babel-core
  - #10402 fix: pass optionLoc when validating plugin object. (@JLHwung)
- babel-plugin-transform-block-scoping, babel-plugin-transform-spread, babel-traverse
  - #10417 Do not guess relative execution status for exported fns. (@nicolo-ribaudo)
- babel-plugin-proposal-object-rest-spread, babel-preset-env
  - #10275 fix object rest in array pattern. (@tanhauhau)
🏠 Internal
- babel-plugin-transform-named-capturing-groups-regex
  - #10430 refactor: replace regexp-tree by regexpu. (@JLHwung)
- Other
  - #10441 Update GitHub actions to v2. (@nicolo-ribaudo)
  - #10427 chore: add lint-ts rule. (@JLHwung)
- babel-helper-fixtures
  - #10428 chore: remove tryResolve dependency. (@JLHwung)
- babel-node
  - #10429 Remove babel polyfill dependency of babel-node. (@bdwain)
- babel-generator, babel-helper-fixtures
  - #10420 chore: remove trim-right dependency. (@JLHwung)
- babel-core, babel-plugin-transform-runtime, babel-register
  - #10405 Remove circular dependency. (@nicolo-ribaudo)
🏃‍♀ Performance
- babel-parser
  - #10421 Miscellaneous perf tweak. (@JLHwung)
Committers: 8
- Bryan Wain (bdwain)
- Gonzalo Rodríguez (gonzarodriguezt)
- Guy Waldman (guywaldman)
- Huáng Jùnliàng (JLHwung)
- Ivan Medina (ivandevp)
- Nicolò Ribaudo (nicolo-ribaudo)
- Tan Li Hau (tanhauhau)
- Vivek Nayyar (vivek12345)
7.6.0 - 2019-09-06
v7.6.0 (2019-09-06)

👓 Spec Compliance
- babel-generator, babel-parser
  - #10269 Fix parenthesis for nullish coalescing (@vivek12345)
- babel-helpers, babel-plugin-transform-block-scoping, babel-traverse
  - #9498 Fix tdz checks in transform-block-scoping plugin (@nicolo-ribaudo)
🚀 New Feature
- babel-core
  - #10181 feat(errors): validate preset when filename is absent (@JLHwung)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-private-methods
  - #10217 Class Private Static Accessors (@tim-mc)
- babel-generator, babel-parser, babel-types
  - #10148 V8intrinsic syntax plugin (@JLHwung)
- babel-preset-typescript
  - #10382 Allow setting 'allowNamespaces' in typescript preset (@dsgkirkby)
- babel-parser
  - #10352 Do not register ambient classes to the TS scope (@nicolo-ribaudo)
- babel-types
  - #10248 Add static to class property builder (@yuri-karadzhov)
🐛 Bug Fix
- babel-helpers, babel-plugin-transform-destructuring, babel-plugin-transform-modules-commonjs, babel-preset-env
  - #10396 fix: early return when instance is not iterable (@JLHwung)
- babel-plugin-transform-runtime
  - #10398 Add supports for polyfill computed methods (@rhyzx)
- babel-preset-env
  - #10397 Don't polyfill when evaluation is not confident (@rhyzx)
  - #10218 [preset-env] Include / exclude module plugins properly (@AdamRamberg)
  - #10284 Replace es.string.reverse with es.array.reverse (@epicfaace)
- babel-plugin-transform-named-capturing-groups-regex
  - #10395 fix: transform name capturing regex once (@JLHwung)
- babel-types
  - #10098 fix typescript for babel-types (@tanhauhau)
  - #10319 Add a builder definition including name for tsTypeParameter (@deificx)
- babel-parser
  - #10380 Refactor trailing comment adjustment (@banga)
  - #10369 Retain trailing comments in array expressions (@banga)
  - #10292 fix: assign trailing comment to ObjectProperty only when inside an ObjectExpression (@JLHwung)
- babel-parser, babel-types
  - #10366 Don't allow JSXNamespacedName to chain (@jridgewell)
- babel-generator, babel-plugin-transform-typescript, babel-types
  - #10341 Add TSBigIntKeyword to @babel/types (@nicolo-ribaudo)
- babel-core, babel-types
  - #9960 Do not delete "fake" source map comments from strings (@nicolo-ribaudo)
- babel-plugin-transform-flow-comments
  - #10329 Fix flow comments plugin issues (@zaygraveyard)
- babel-helpers, babel-plugin-transform-react-constant-elements
  - #10307 [fix] jsx helper calls order (@Sinewyk)
- babel-plugin-proposal-decorators
  - #10302 fix: register inserted class declaration (@thiagoarrais)
- babel-plugin-proposal-do-expressions, babel-traverse
  - #10070 Do expressions transform for switch statements (@tanhauhau)
  - #10277 remove finally from completion record in try statement (@tanhauhau)
- babel-helpers, babel-plugin-transform-named-capturing-groups-regex
  - #10136 fix capturing group for matchAll (@tanhauhau)
💅 Polish
- babel-plugin-transform-runtime, babel-preset-env
  - #10372 Don't allow instance properties transformation on namespace (@rhyzx)
📝 Documentation
- #10313 Adds note about two approval policy to PR template (@thiagoarrais)
🏠 Internal
- babel-register
  - #9847 Remove core-js dependency from @babel/register (@coreyfarrell)
- babel-helper-fixtures, babel-helper-transform-fixture-test-runner, babel-preset-env
  - #10401 Use "validateLogs" for preset-env's debug fixtures (@nicolo-ribaudo)
- babel-parser
  - #10380 Refactor trailing comment adjustment (@banga)
- babel-helper-fixtures, babel-helper-transform-fixture-test-runner, babel-plugin-proposal-dynamic-import, babel-preset-env
  - #10326 Allow testing logs with @babel/helper-transform-fixture-test-runner (@nicolo-ribaudo)
- babel-runtime-corejs2, babel-runtime, babel-types
  - #10331 Commit generated code (@JLHwung)
- babel-cli, babel-core, babel-generator, babel-helper-create-class-features-plugin, babel-helper-fixtures, babel-node, babel-parser, babel-plugin-proposal-do-expressions, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-modules-commonjs, babel-plugin-transform-runtime, babel-preset-env, babel-standalone, babel-template, babel-traverse, babel-types
  - #10228 Update dev dependencies and fix linting errors (@danez)
- babel-cli
  - #10244 added flow to babel cli (@Letladi)
🏃‍♀ Performance
- babel-helpers, babel-plugin-transform-modules-commonjs, babel-preset-env
  - #10161 Improves the logic to import objects in helpers (@ifsnow)
- babel-traverse
  - #10243 perf: always return void 0 as undefined node (@JLHwung)
Committers: 22
- Adam Ramberg (@AdamRamberg)
- Ajay Sagar (@ajaysagar)
- Ashwin Ramaswami (@epicfaace)
- Bin Xin (@rhyzx)
- Brian Donovan (@eventualbuddha)
- Corey Farrell (@coreyfarrell)
- Daniel Tschinder (@danez)
- Dylan Kirkby (@dsgkirkby)
- Even Alander (@deificx)
- Huáng Jùnliàng (@JLHwung)
- Justin Ridgewell (@jridgewell)
- Letladi Sebesho (@Letladi)
- Nicolò Ribaudo (@nicolo-ribaudo)
- Serge Havas (@Sinewyk)
- Shrey Banga (@banga)
- Tan Li Hau (@tanhauhau)
- Thiago Arrais (@thiagoarrais)
- Tim McClure (@tim-mc)
- Vivek Nayyar (@vivek12345)
- Yuri Karadzhov (@yuri-karadzhov)
- Ziad El Khoury Hanna (@zaygraveyard)
- Sungmin Lee (@ifsnow)
7.5.5 - 2019-07-17
v7.5.5 (2019-07-17)

Thanks to @sag1v and @CYBAI for their first PRs!

🐛 Bug Fix
- babel-code-frame
  - #10211 fix code-frame marker with highlighting (@tanhauhau)
- babel-plugin-proposal-object-rest-spread
  - #10200 Workaround #10179 in proposal-object-rest-spread (@nicolo-ribaudo)
- babel-types
  - #10198 add assertShape to validate templateElement (@tanhauhau)
- babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-helper-replace-supers, babel-helpers, babel-plugin-proposal-class-properties, babel-plugin-transform-classes, babel-plugin-transform-object-super, babel-types
  - #10017 destructuring private fields with array pattern / object pattern (@tanhauhau)
- babel-plugin-transform-flow-comments
  - #9901 fix transform-flow-comments for import types (@tanhauhau)
- babel-core, babel-helpers
  - #10208 always throw when add missing helpers (@tanhauhau)
- babel-plugin-transform-runtime
  - #10207 Closes #10205 (@sag1v)
- babel-helpers, babel-plugin-transform-instanceof
  - #10197 fix: custom instOfHandler result should be cast to boolean (@JLHwung)
🏠 Internal
- babel-parser, babel-plugin-transform-typescript
  - #10014 Use correct extension for typescript fixtures (@danez)
🏃‍♀ Performance
- babel-helpers, babel-plugin-proposal-object-rest-spread, babel-preset-env
  - #10189 perf: match ownKeys perf to the one of objectSpread (@JLHwung)
Committers: 7
- Daniel Tschinder (@danez)
- Huáng Jùnliàng (@JLHwung)
- James DiGioia (@mAAdhaTTah)
- Nicolò Ribaudo (@nicolo-ribaudo)
- Sagiv ben giat (@sag1v)
- Tan Li Hau (@tanhauhau)
- cybai (@CYBAI)
7.5.4 - 2019-07-09
v7.5.4 (2019-07-09)

🐛 Bug Fix
- babel-helpers, babel-plugin-proposal-object-rest-spread, babel-preset-env
  - #10188 Fix _objectSpread2 for real (@nicolo-ribaudo)
Committers: 1
- Nicolò Ribaudo (@nicolo-ribaudo)
7.5.3 - 2019-07-09
v7.5.3 (2019-07-09)

🐛 Bug Fix
- babel-helpers, babel-plugin-proposal-object-rest-spread, babel-preset-env
  - #10180 [_objectSpread2] Do not use hoisted var from prev iteration (@nicolo-ribaudo)
Committers: 1
- Nicolò Ribaudo (@nicolo-ribaudo)
7.5.2 - 2019-07-08
v7.5.2 (2019-07-08)

🐛 Bug Fix
- babel-plugin-transform-typescript
  - #10174 Do not trust Scope when removing TypeScript types (@nicolo-ribaudo)
- babel-helpers, babel-plugin-proposal-object-rest-spread, babel-preset-env
  - #10171 Don't rely on getOwnPropertyDescriptors in objectSpread2 (@nicolo-ribaudo)
- babel-plugin-proposal-export-default-from, babel-plugin-proposal-export-namespace-from
  - #10172 fix: register injected importDeclaration (@JLHwung)
Committers: 2
- Huáng Jùnliàng (@JLHwung)
- Nicolò Ribaudo (@nicolo-ribaudo)
7.5.0 - 2019-07-04
v7.5.0 (2019-07-04)

👓 Spec Compliance
- babel-parser
  - #10099 Disallow "let" as name at lexical bindings (@g-plane)
🚀 New Feature
- babel-parser
  - #10091 BigInt type for Flow (@tanhauhau)
  - #9450 Implement f# pipeline in parser (@mAAdhaTTah)
  - #9912 [legacy decorators] Allow decorating generator methods (@nicolo-ribaudo)
  - #9864 [@babel/parser] Add "allowUndeclaredExports" option (@nicolo-ribaudo)
- babel-plugin-proposal-dynamic-import, babel-preset-env-standalone, babel-preset-env
  - #10109 Add @babel/plugin-proposal-dynamic-import to @babel/preset-env (@nicolo-ribaudo)
- babel-plugin-proposal-dynamic-import, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs
  - #9552 Create @babel/plugin-proposal-dynamic-import (@nicolo-ribaudo)
- babel-plugin-proposal-pipeline-operator, babel-plugin-syntax-pipeline-operator
  - #9984 Transform for F# Pipeline (@thiagoarrais)
- babel-plugin-transform-typescript, babel-types
  - #9785 Implement TypeScript namespace support (@Wolvereness)
🐛 Bug Fix
- babel-plugin-proposal-do-expressions, babel-traverse
  - #10072 fix await and yield for do expression (@tanhauhau)
- babel-helpers, babel-plugin-transform-react-constant-elements
  - #10155 Added es3 backward compatibility for react helper code (@sormy)
- babel-preset-env
  - #10127 Bump compat-table and updating preset-env mappings (@existentialism)
  - #8897 Allow defaults query in preset-env (@existentialism)
- babel-parser
  - #10132 fix import typeof in declare module (@tanhauhau)
  - #10084 flow - allow type parameter defaults in function declarations (@tanhauhau)
- babel-types
  - #10126 fix exportKind declaration in babel-types (@zxbodya)
- babel-node
  - #9951 Prevents exception on PnP (@arcanis)
- babel-generator
  - #10041 Fix printer for explicitly inexact Flow types (@mrtnzlml)
- babel-plugin-transform-typescript
  - #10034 Use scope for typescript export removals (@Wolvereness)
  - #10019 fix(typescript): erase default export if exporting a TS type (@airato)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-class-properties, babel-traverse
  - #10029 Fixed computed keys for class expression (@tanhauhau)
- babel-helpers, babel-plugin-proposal-object-rest-spread, babel-preset-env
  - #9384 Retry to fix object spread helper compatibility (@saschanaz)
- babel-plugin-transform-destructuring
  - #10013 fix destructuring rest with template literal (@tanhauhau)
- babel-helper-create-class-features-plugin, babel-plugin-transform-typescript
  - #9610 Use injectInitialization to generate ts parameter properties (@nicolo-ribaudo)
💅 Polish
- babel-core
  - #10157 Fix incorrect usage of $o instead of %o in debug (@ChlorideCull)
- babel-helpers
  - #10117 Simplify the helpers for classPrivateField{Get,Set} (@arv)
- babel-plugin-transform-typescript
  - #10047 Refactor isImportTypeOnly helper function (@Andarist)
📝 Documentation
- babel-plugin-proposal-partial-application, babel-plugin-syntax-partial-application
  - #10103 docs: update readmes (@xtuc)
Committers: 24
- Airat Aminev (@airato)
- Artem Butusov (@sormy)
- Blaine Bublitz (@phated)
- Bogdan Savluk (@zxbodya)
- Brian Ng (@existentialism)
- Daniel Tschinder (@danez)
- Erik Arvidsson (@arv)
- Henry Zhu (@hzoo)
- James DiGioia (@mAAdhaTTah)
- Jamie Kyle (@jamiebuilds)
- Kagami Sascha Rosylight (@saschanaz)
- Letladi Sebesho (@Letladi)
- Martin Zlámal (@mrtnzlml)
- Mateusz Burzyński (@Andarist)
- Maël Nison (@arcanis)
- Min ho Kim (@minho42)
- Nicolò Ribaudo (@nicolo-ribaudo)
- Paul Comanici (@darkyndy)
- Pig Fang (@g-plane)
- Sebastian Johansson (@ChlorideCull)
- Sven Sauleau (@xtuc)
- Tan Li Hau (@tanhauhau)
- Thiago Arrais (@thiagoarrais)
- Wesley Wolfe (@Wolvereness)
7.4.5 - 2019-05-21
v7.4.5 (2019-05-21)

Thanks @airato, @schu34, @divbhasin, @eps1lon and @pnavarrc for their first PRs! 😄

🐛 Bug Fix
- babel-parser
  - #9998 Fix location for optional params in arrow functions (@danez)
  - #9982 Avoid unnecessary work during lookahead (@danez)
  - #9922 fix: allow shebang directive (@tanhauhau)
- babel-preset-env
  - #10002 Update preset-env dependencies and fix fixtures (@danez)
  - #9978 Fix mobile browsers support in preset-env (@nicolo-ribaudo)
  - #9902 Fix destructuring assignments being transpiled for edge 15 (@eps1lon)
- babel-plugin-transform-typescript
  - #9944 fix(typescript): erase type exports (@airato)
💅 Polish
- babel-parser
  - #9995 Do not use lookahead when parsing construct signature declarations in TS (@danez)
  - #9989 Only compute Position if not already in state (@danez)
  - #9988 Do not use lookahead when parsing jsx expression containers (@danez)
  - #9987 Do not use lookahead when parsing imports in declare module in flow (@danez)
  - #9985 Do not use lookahead when parsing declare module or declare module.exports in flow (@danez)
  - #9983 Do not use lookahead when parsing dynamic import or import.meta (@danez)
  - #9979 Remove guardedHandlers from ASTs (@danez)
- babel-preset-env
  - #9992 use console.warn for warning (@schu34)
- babel-core
  - #9945 Fixed null error in plugin opts and added a test for it (@divbhasin)
- babel-core, babel-traverse
  - #9909 Add missing space in error messages (@pnavarrc)
🏠 Internal
- babel-node
  - #9914 [babel-node] Do not hardcode node flags (@nicolo-ribaudo)
Committers: 9
- Airat Aminev (@airato)
- Daniel Tschinder (@danez)
- Divyam Bhasin (@divbhasin)
- Matthew Robertson (@matthewrobertson)
- Matthew Schupack (@schu34)
- Nicolò Ribaudo (@nicolo-ribaudo)
- Pablo Navarro (@pnavarrc)
- Sebastian Silbermann (@eps1lon)
- Tan Li Hau (@tanhauhau)

from @babel/preset-env GitHub Release Notes

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @babel/preset-env from 7.4.5 to 7.6.2. See this package in NPM: https://www.npmjs.com/package/@babel/preset-env See this project in Snyk: https://app.snyk.io/org/peter.szabo/project/0a9b2ad2-07af-41e3-bbf4-bb09c4179728?utm_source=github&utm_medium=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade @babel/preset-env from 7.4.5 to 7.6.2 #15

[Snyk] Upgrade @babel/preset-env from 7.4.5 to 7.6.2 #15

snyk-bot commented Oct 5, 2019

[Snyk] Upgrade @babel/preset-env from 7.4.5 to 7.6.2 #15

Are you sure you want to change the base?

[Snyk] Upgrade @babel/preset-env from 7.4.5 to 7.6.2 #15

Conversation

snyk-bot commented Oct 5, 2019

v7.6.2 (2019-09-23)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

🏃‍♀ Performance

Committers: 8

v7.6.0 (2019-09-06)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🏃‍♀ Performance

Committers: 22

v7.5.5 (2019-07-17)

🐛 Bug Fix

🏠 Internal

🏃‍♀ Performance

Committers: 7

v7.5.4 (2019-07-09)

🐛 Bug Fix

Committers: 1

v7.5.3 (2019-07-09)

🐛 Bug Fix

Committers: 1

v7.5.2 (2019-07-08)

🐛 Bug Fix

Committers: 2

v7.5.0 (2019-07-04)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

💅 Polish

📝 Documentation

Committers: 24

v7.4.5 (2019-05-21)

🐛 Bug Fix

💅 Polish

🏠 Internal

Committers: 9