[Snyk] Security upgrade rollup-plugin-babel from 2.7.1 to 4.4.0

[aliscco]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • tools/node_modules/eslint/node_modules/uri-js/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	786/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 9.3	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962463	Yes	Proof of Concept
	641/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.4	Prototype Pollution SNYK-JS-JSON5-3182856	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: rollup-plugin-babel

The new version differs by 130 commits.

• 05fb203 4.4.0
• c2821d0 Allow Rollup 2 in peer dependency range
• 4d8c0c5 4.3.3
• e386e1f Update rollup-pluginutils@2.8.1 ([Snyk] Fix for 9 vulnerabilities #311)
• 54a166a chore: npm audit fix
• 18e4232 chore: audit fixes
• 8357816 Update CHANGELOG with note about 4.3.2
• 79941b5 4.3.2
• a7e7676 Fix usage with externalHelpers flag
• 66f2f41 Add note to CHANGELOG about v4.3.1
• a7aaac7 4.3.1
• 214882b Add js extention to helper file ([Snyk] Security upgrade grunt-npm-install from 0.1.0 to 0.2.0 #296)
• e746832 Update CHANGELOG
• 551ef31 Fix reference to the plugin in the README
• bf9f1a2 4.3.0
• 97ac95b Merge branch 'custom-builder'
• f250dea Add docs about .custom builder
• 542c143 Merge branch 'master' into custom-builder
• ba2559a Fail build when trying plugin tries to add non-existent helper ([Snyk] Fix for 20 vulnerabilities #290)
• 0a764c0 Remove unnecessary guard against missing plugins in preflight check
• 31a6f88 Tweak .custom API, validate options hook - it cant be async
• 54d3cee Merge branch 'master' into custom-builder
• 0752385 Update devDep to rollup@1
• c8983e5 4.2.0

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution