[Snyk] Upgrade: , , , , , , , , , , aws-sdk, axios, babel-plugin-add-module-exports, debug, body-parser, connect-datadog, cookie-parser, dayjs, express, file-type, fluent-ffmpeg, image-size, js-beautify, memoizee, moment, xml2js, nodemailer, ramda, redis, slack-node #65

hadeseggplant · 2024-09-18T11:45:37Z

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

@babel/core
from 7.21.8 to 7.25.2 | 31 versions ahead of your current version | 2 months ago
on 2024-07-30
@babel/plugin-proposal-decorators
from 7.21.0 to 7.24.7 | 23 versions ahead of your current version | 3 months ago
on 2024-06-05
@babel/plugin-proposal-do-expressions
from 7.18.6 to 7.24.7 | 10 versions ahead of your current version | 3 months ago
on 2024-06-05
@babel/plugin-proposal-export-default-from
from 7.18.10 to 7.24.7 | 11 versions ahead of your current version | 3 months ago
on 2024-06-05
@babel/plugin-proposal-function-sent
from 7.18.6 to 7.24.7 | 10 versions ahead of your current version | 3 months ago
on 2024-06-05
@babel/plugin-proposal-pipeline-operator
from 7.18.9 to 7.24.7 | 11 versions ahead of your current version | 3 months ago
on 2024-06-05
@babel/plugin-proposal-throw-expressions
from 7.18.6 to 7.24.7 | 10 versions ahead of your current version | 3 months ago
on 2024-06-05
@babel/preset-env
from 7.21.5 to 7.25.4 | 31 versions ahead of your current version | a month ago
on 2024-08-22
@sentry/node
from 7.51.0 to 7.119.0 | 103 versions ahead of your current version | a month ago
on 2024-08-14
@sentry/tracing
from 7.51.0 to 7.119.0 | 102 versions ahead of your current version | a month ago
on 2024-08-14
aws-sdk
from 2.1373.0 to 2.1684.0 | 311 versions ahead of your current version | 22 days ago
on 2024-08-27
axios
from 1.4.0 to 1.7.5 | 20 versions ahead of your current version | a month ago
on 2024-08-23
babel-plugin-add-module-exports
from 0.2.1 to 0.3.3 | 7 versions ahead of your current version | 6 years ago
on 2018-08-14
debug
from 2.2.0 to 2.6.9 | 23 versions ahead of your current version | 7 years ago
on 2017-09-22
body-parser
from 1.13.3 to 1.20.2 | 21 versions ahead of your current version | 2 years ago
on 2023-02-22
connect-datadog
from 0.0.6 to 0.0.9 | 3 versions ahead of your current version | 5 years ago
on 2019-07-04
cookie-parser
from 1.3.5 to 1.4.6 | 7 versions ahead of your current version | 3 years ago
on 2021-11-16
dayjs
from 1.11.7 to 1.11.13 | 6 versions ahead of your current version | a month ago
on 2024-08-20
express
from 4.14.1 to 4.19.2 | 22 versions ahead of your current version | 6 months ago
on 2024-03-25
file-type
from 12.2.0 to 12.4.2 | 5 versions ahead of your current version | 5 years ago
on 2019-12-20
fluent-ffmpeg
from 2.1.2 to 2.1.3 | 1 version ahead of your current version | 4 months ago
on 2024-05-19
image-size
from 0.6.3 to 0.9.7 | 17 versions ahead of your current version | 4 years ago
on 2021-03-15
js-beautify
from 1.6.14 to 1.15.1 | 76 versions ahead of your current version | 7 months ago
on 2024-02-16
memoizee
from 0.4.15 to 0.4.17 | 2 versions ahead of your current version | 4 months ago
on 2024-05-24
moment
from 2.29.4 to 2.30.1 | 2 versions ahead of your current version | 9 months ago
on 2023-12-27
xml2js
from 0.4.23 to 0.6.2 | 4 versions ahead of your current version | a year ago
on 2023-07-26
nodemailer
from 6.9.1 to 6.9.14 | 13 versions ahead of your current version | 3 months ago
on 2024-06-19
ramda
from 0.26.1 to 0.30.1 | 8 versions ahead of your current version | 4 months ago
on 2024-06-02
redis
from 2.6.5 to 2.8.0 | 3 versions ahead of your current version | 7 years ago
on 2017-08-08
slack-node
from 0.1.8 to 0.2.0 | 1 version ahead of your current version | 9 years ago
on 2016-02-15

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Prototype Poisoning SNYK-JS-QS-3153490	696	Proof of Concept
Prototype Override Protection Bypass npm:qs:20170213	696	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ES5EXT-6095076	696	Proof of Concept
Improper Input Validation SNYK-JS-FOLLOWREDIRECTS-6141137	696	Proof of Concept
Prototype Poisoning SNYK-JS-QS-3153490	696	Proof of Concept
Prototype Override Protection Bypass npm:qs:20170213	696	No Known Exploit
Cross-site Request Forgery (CSRF) SNYK-JS-AXIOS-6032459	696	Proof of Concept
Prototype Pollution SNYK-JS-AXIOS-6144788	696	No Known Exploit
Server-side Request Forgery (SSRF) SNYK-JS-AXIOS-7361793	696	Proof of Concept
Regular Expression Denial of Service (ReDoS) npm:fresh:20170908	696	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-RAMDA-1582370	696	No Known Exploit
Open Redirect SNYK-JS-EXPRESS-6474509	696	No Known Exploit
Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	696	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-NODEMAILER-6219989	696	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-6124857	696	Proof of Concept
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	696	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-JSBEAUTIFY-2311652	696	No Known Exploit
Regular Expression Denial of Service (ReDoS) npm:mime:20170907	696	No Known Exploit
Regular Expression Denial of Service (ReDoS) npm:ms:20170412	696	No Known Exploit
Regular Expression Denial of Service (ReDoS) npm:ms:20170412	696	No Known Exploit

Release notes

Package name: @babel/core

7.25.2 - 2024-07-30
v7.25.2 (2024-07-30)

🐛 Bug Fix
- babel-core, babel-traverse
  - #16695 Ensure that requeueComputedKeyAndDecorators is available (@ nicolo-ribaudo)
Committers: 2
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
7.24.9 - 2024-07-15
v7.24.9 (2024-07-15)

🐛 Bug Fix
- babel-core, babel-standalone
  - #16639 Avoid require() call in @ babel/standalone bundle (@ nicolo-ribaudo)
- babel-types
  - #16638 fix: provide legacy typings for TS < 4.1 (@ JLHwung)
💅 Polish
- babel-generator, babel-plugin-transform-optional-chaining
  - #16617 Avoid extra parens in TS as/satisfies (@ nicolo-ribaudo)
🏠 Internal
- babel-helper-module-transforms
  - #16629 Lazy top-level initializations for module transforms (@ guybedford)
Committers: 5
- Babel Bot (@ babel-bot)
- Guy Bedford (@ guybedford)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.24.8 - 2024-07-11
7.24.7 - 2024-06-05
7.24.6 - 2024-05-24
7.24.5 - 2024-04-29
7.24.4 - 2024-04-03
7.24.3 - 2024-03-20
7.24.1 - 2024-03-19
7.24.0 - 2024-02-28
7.23.9 - 2024-01-25
7.23.7 - 2023-12-29
7.23.6 - 2023-12-11
7.23.5 - 2023-11-29
7.23.3 - 2023-11-09
7.23.2 - 2023-10-12
7.23.0 - 2023-09-25
7.22.20 - 2023-09-16
7.22.19 - 2023-09-14
7.22.18 - 2023-09-14
7.22.17 - 2023-09-08
7.22.15 - 2023-09-04
7.22.11 - 2023-08-24
7.22.10 - 2023-08-07
7.22.9 - 2023-07-12
7.22.8 - 2023-07-06
7.22.7 - 2023-07-06
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.1 - 2023-05-26
7.22.0 - 2023-05-26
7.21.8 - 2023-05-02

from @babel/core GitHub release notes

Package name: @babel/plugin-proposal-decorators

7.24.7 - 2024-06-05
v7.24.7 (2024-06-05)

🐛 Bug Fix
- babel-node
  - #16554 Allow extra flags in babel-node (@ nicolo-ribaudo)
- babel-traverse
  - #16522 fix: incorrect constantViolations with destructuring (@ liuxingbaoyu)
- babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management
  - #16524 fix: Transform using in switch correctly (@ liuxingbaoyu)
🏠 Internal
- babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16525 Delete unused array helpers (@ blakewilson)
Committers: 7
- Amjad Yahia Robeen Hassan (@ amjed-98)
- Babel Bot (@ babel-bot)
- Blake Wilson (@ blakewilson)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sukka (@ SukkaW)
- @ liuxingbaoyu
7.24.6 - 2024-05-24
v7.24.6 (2024-05-24)

Thanks @ amjed-98, @ blakewilson, @ coelhucas, and @ SukkaW for your first PRs!

🐛 Bug Fix
- babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  - #16514 Fix source maps for private member expressions (@ nicolo-ribaudo)
- babel-core, babel-generator, babel-plugin-transform-modules-commonjs
  - #16515 Fix source maps for template literals (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16485 Support undecorated static accessor in anonymous classes (@ JLHwung)
  - #16484 Fix decorator bare yield await (@ JLHwung)
- babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
  - #16483 Fix: throw TypeError if addInitializer is called after finished (@ JLHwung)
- babel-parser, babel-plugin-transform-typescript
  - #16476 fix: Correctly parse cls.fn<C> = x (@ liuxingbaoyu)
🏠 Internal
- babel-core, babel-helpers, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16501 Generate helper metadata at build time (@ nicolo-ribaudo)
- babel-helpers
  - #16499 Add tsconfig.json for @ babel/helpers/src/helpers (@ nicolo-ribaudo)
- babel-cli, babel-helpers, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16495 Move all runtime helpers to individual files (@ nicolo-ribaudo)
- babel-parser, babel-traverse
  - #16482 Statically generate boilerplate for bitfield accessors (@ nicolo-ribaudo)
- Other
  - #16466 Migrate import assertions syntax (@ JLHwung)
Committers: 9
- Amjad Yahia Robeen Hassan (@ amjed-98)
- Babel Bot (@ babel-bot)
- Blake Wilson (@ blakewilson)
- Huáng Jùnliàng (@ JLHwung)
- Lucas Coelho (@ coelhucas)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sukka (@ SukkaW)
- Zzzen (@ Zzzen)
- @ liuxingbaoyu
7.24.1 - 2024-03-19
v7.24.1 (2024-03-19)

🐛 Bug Fix
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16350 Fix decorated class computed keys ordering (@ JLHwung)
  - #16344 Fix decorated class static field private access (@ JLHwung)
- babel-plugin-proposal-decorators, babel-plugin-proposal-json-modules, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
  - #16329 Respect moduleName for @ babel/runtime/regenerator imports (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
  - #16331 Fix decorator memoiser binding kind (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
  - #16325 Fix decorator evaluation private environment (@ JLHwung)
📝 Documentation
- #16319 Update SECURITY.md (@ nicolo-ribaudo)
🏠 Internal
- babel-code-frame, babel-highlight
  - #16359 Replace chalk with picocolors (@ nicolo-ribaudo)
- babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-preset-flow
  - #16352 Run Babel transform tests on old node if possible (@ JLHwung)
- babel-helper-module-imports, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-plugin-proposal-record-and-tuple, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx
  - #16349 Support merging imports in import injector (@ nicolo-ribaudo)
- Other
  - #16332 Test Babel 7 plugins compatibility with Babel 8 core (@ nicolo-ribaudo)
🔬 Output optimization
- babel-helper-replace-supers, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime
  - #16345 Optimize the use of assertThisInitialized after super() (@ liuxingbaoyu)
- babel-plugin-transform-class-properties, babel-plugin-transform-classes
  - #16343 Use simpler assertThisInitialized more often (@ liuxingbaoyu)
- babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-object-rest-spread, babel-traverse
  - #16342 Consider well-known and registered symbols as literals (@ nicolo-ribaudo)
- babel-core, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-function-bind, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-flow-comments, babel-plugin-transform-flow-strip-types, babel-plugin-transform-function-name, babel-plugin-transform-modules-systemjs, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx, babel-plugin-transform-runtime, babel-plugin-transform-spread, babel-plugin-transform-typescript, babel-preset-env
  - #16326 Reduce the use of class names (@ liuxingbaoyu)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.24.0 - 2024-02-28
7.23.9 - 2024-01-25
7.23.7 - 2023-12-29
7.23.6 - 2023-12-11
7.23.5 - 2023-11-29
7.23.3 - 2023-11-09
7.23.2 - 2023-10-11
7.23.0 - 2023-09-25
7.22.15 - 2023-09-04
7.22.10 - 2023-08-07
7.22.7 - 2023-07-06
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.3 - 2023-05-27
7.22.0 - 2023-05-26
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.0 - 2023-02-20

from @babel/plugin-proposal-decorators GitHub release notes

Package name: @babel/plugin-proposal-do-expressions

7.24.7 - 2024-06-05
v7.24.7 (2024-06-05)

🐛 Bug Fix
- babel-node
  - #16554 Allow extra flags in babel-node (@ nicolo-ribaudo)
- babel-traverse
  - #16522 fix: incorrect constantViolations with destructuring (@ liuxingbaoyu)
- babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management
  - #16524 fix: Transform using in switch correctly (@ liuxingbaoyu)
🏠 Internal
- babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16525 Delete unused array helpers (@ blakewilson)
Committers: 7
- Amjad Yahia Robeen Hassan (@ amjed-98)
- Babel Bot (@ babel-bot)
- Blake Wilson (@ blakewilson)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sukka (@ SukkaW)
- @ liuxingbaoyu
7.24.6 - 2024-05-24
v7.24.6 (2024-05-24)

Thanks @ amjed-98, @ blakewilson, @ coelhucas, and @ SukkaW for your first PRs!

🐛 Bug Fix
- babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  - #16514 Fix source maps for private member expressions (@ nicolo-ribaudo)
- babel-core, babel-generator, babel-plugin-transform-modules-commonjs
  - #16515 Fix source maps for template literals (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16485 Support undecorated static accessor in anonymous classes (@ JLHwung)
  - #16484 Fix decorator bare yield await (@ JLHwung)
- babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
  - #16483 Fix: throw TypeError if addInitializer is called after finished (@ JLHwung)
- babel-parser, babel-plugin-transform-typescript
  - #16476 fix: Correctly parse cls.fn<C> = x (@ liuxingbaoyu)
🏠 Internal
- babel-core, babel-helpers, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16501 Generate helper metadata at build time (@ nicolo-ribaudo)
- babel-helpers
  - #16499 Add tsconfig.json for @ babel/helpers/src/helpers (@ nicolo-ribaudo)
- babel-cli, babel-helpers, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16495 Move all runtime helpers to individual files (@ nicolo-ribaudo)
- babel-parser, babel-traverse
  - #16482 Statically generate boilerplate for bitfield accessors (@ nicolo-ribaudo)
- Other
  - #16466 Migrate import assertions syntax (@ JLHwung)
Committers: 9
- Amjad Yahia Robeen Hassan (@ amjed-98)
- Babel Bot (@ babel-bot)
- Blake Wilson (@ blakewilson)
- Huáng Jùnliàng (@ JLHwung)
- Lucas Coelho (@ coelhucas)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sukka (@ SukkaW)
- Zzzen (@ Zzzen)
- @ liuxingbaoyu
7.24.1 - 2024-03-19
v7.24.1 (2024-03-19)

🐛 Bug Fix
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16350 Fix decorated class computed keys ordering (@ JLHwung)
  - #16344 Fix decorated class static field private access (@ JLHwung)
- babel-plugin-proposal-decorators, babel-plugin-proposal-json-modules, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
  - #16329 Respect moduleName for @ babel/runtime/regenerator imports (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
  - #16331 Fix decorator memoiser binding kind (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
  - #16325 Fix decorator evaluation private environment (@ JLHwung)
📝 Documentation
- #16319 Update SECURITY.md (@ nicolo-ribaudo)
🏠 Internal
- babel-code-frame, babel-highlight
  - #16359 Replace chalk with picocolors (@ nicolo-ribaudo)
- babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-preset-flow
  - #16352 Run Babel transform tests on old node if possible (@ JLHwung)
- babel-helper-module-imports, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-plugin-proposal-record-and-tuple, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx
  - #16349 Support merging imports in import injector (@ nicolo-ribaudo)
- Other
  - #16332 Test Babel 7 plugins compatibility with Babel 8 core (@ nicolo-ribaudo)
🔬 Output optimization
- babel-helper-replace-supers, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime
  - #16345 Optimize the use of assertThisInitialized after super() (@ liuxingbaoyu)
- babel-plugin-transform-class-properties, babel-plugin-transform-classes
  - #16343 Use simpler assertThisInitialized more often (@ liuxingbaoyu)
- babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-object-rest-spread, babel-traverse
  - #16342 Consider well-known and registered symbols as literals (@ nicolo-ribaudo)
- babel-core, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-function-bind, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-flow-comments, babel-plugin-transform-flow-strip-types, babel-plugin-transform-function-name, babel-plugin-transform-modules-systemjs, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx, babel-plugin-transform-runtime, babel-plugin-transform-spread, babel-plugin-transform-typescript, babel-preset-env
  - #16326 Reduce the use of class names (@ liuxingbaoyu)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.23.3 - 2023-11-09
7.22.5 - 2023-06-08
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.18.6 - 2022-06-27

from @babel/plugin-proposal-do-expressions GitHub release notes

Package name: @babel/plugin-proposal-export-default-from

7.24.7 - 2024-06-05
v7.24.7 (2024-06-05)

🐛 Bug Fix
- babel-node
  - #16554 Allow extra flags in babel-node (@ nicolo-ribaudo)
- babel-traverse
  - #16522 fix: incorrect constantViolations with destructuring (@ liuxingbaoyu)
- babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management
  - #16524 fix: Transform using in switch correctly (@ liuxingbaoyu)
🏠 Internal
- babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16525 Delete unused array helpers (@ blakewilson)
Committers: 7
- Amjad Yahia Robeen Hassan (@ amjed-98)
- Babel Bot (@ babel-bot)
- Blake Wilson (@ blakewilson)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sukka (@ SukkaW)
- @ liuxingbaoyu
7.24.6 - 2024-05-24
v7.24.6 (2024-05-24)

Thanks @ amjed-98, @ blakewilson, @ coelhucas, and @ SukkaW for your first PRs!

🐛 Bug Fix
- babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  - #16514 Fix source maps for private member expressions (@ nicolo-ribaudo)
- babel-core, babel-generator, babel-plugin-transform-modules-commonjs
  - #16515 Fix source maps for template literals (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16485 Support undecorated static accessor in anonymous classes (@ JLHwung)
  - #16484 Fix decorator bare yield await (@ JLHwung)
- babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
  - #16483 Fix: throw TypeError if addInitializer is called after finished (@ JLHwung)
- babel-parser, babel-plugin-transform-typescript
  - #16476 fix: Correctly parse cls.fn<C> = x (@ liuxingbaoyu)
🏠 Internal
- babel-core, babel-helpers, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16501 Generate helper metadata at build time (@ nicolo-ribaudo)
- babel-helpers
  - #16499 Add tsconfig.json for @ babel/helpers/src/helpers (@ nicolo-ribaudo)
- babel-cli, babel-helpers, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16495 Move all runtime helpers to individual files (@ nicolo-ribaudo)
- babel-parser, babel-traverse
  - #16482 Statically generate boilerplate for bitfield accessors (@ nicolo-ribaudo)
- Other
  - #16466 Migrate import assertions syntax (@ JLHwung)
Committers: 9
- Amjad Yahia Robeen Hassan (@ amjed-98)
- Babel Bot (@ babel-bot)
- Blake Wilson (@ blakewilson)
- Huáng Jùnliàng (@ JLHwung)
- Lucas Coelho (@ coelhucas)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sukka (@ SukkaW)
- Zzzen (@ Zzzen)
- @ liuxingbaoyu
7.24.1 - 2024-03-19
v7.24.1 (2024-03-19)

🐛 Bug Fix
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16350 Fix decorated class computed keys ordering (@ JLHwung)
  - #16344 Fix decorated class static field private access (@ JLHwung)
- babel-plugin-proposal-decorators, babel-plugin-proposal-json-modules, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
  - #16329 Respect moduleName for @ babel/runtime/regenerator imports (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
  - #16331 Fix decorator memoiser binding kind (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
  - #16325 Fix decorator evaluation private environment (@ JLHwung)
📝 Documentation
- #16319 Update SECURITY.md (@ nicolo-ribaudo)
🏠 Internal
- babel-code-frame, babel-highlight
  - #16359 Replace chalk with picocolors (@ nicolo-ribaudo)
- babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-preset-flow
  - #16352 Run Babel transform tests on old node if possible (@ JLHwung)
- babel-helper-module-imports, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-plugin-proposal-record-and-tuple, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx
  - #16349 Support merging imports in import injector (@ nicolo-ribaudo)
- Other
  - #16332 Test Babel 7 plugins compatibility with Babel 8 core (@ nicolo-ribaudo)
🔬 Output optimization
- babel-helper-replace-supers, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime
  - #16345 Optimize the use of assertThisInitialized after super() (@ liuxingbaoyu)
- babel-plugin-transform-class-properties, babel-plugin-transform-classes
  - #16343 Use simpler assertThisInitialized more often (@ liuxingbaoyu)
- babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-object-rest-spread, babel-traverse
  - #16342 Consider well-known and registered symbols as literals (@ nicolo-ribaudo)
- babel-core, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-function-bind, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-flow-comments, babel-plugin-transform-flow-strip-types, babel-plugin-transform-function-name, babel-plugin-transform-modules-systemjs, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx, babel-plugin-transform-runtime, babel-plugin-transform-spread, babel-plugin-transform-typescript, babel-preset-env
  - #16326 Reduce the use of class names (@ liuxingbaoyu)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnli...

Snyk has created this PR to upgrade: - @babel/core from 7.21.8 to 7.25.2. See this package in npm: https://www.npmjs.com/package/@babel/core - @babel/plugin-proposal-decorators from 7.21.0 to 7.24.7. See this package in npm: https://www.npmjs.com/package/@babel/plugin-proposal-decorators - @babel/plugin-proposal-do-expressions from 7.18.6 to 7.24.7. See this package in npm: https://www.npmjs.com/package/@babel/plugin-proposal-do-expressions - @babel/plugin-proposal-export-default-from from 7.18.10 to 7.24.7. See this package in npm: https://www.npmjs.com/package/@babel/plugin-proposal-export-default-from - @babel/plugin-proposal-function-sent from 7.18.6 to 7.24.7. See this package in npm: https://www.npmjs.com/package/@babel/plugin-proposal-function-sent - @babel/plugin-proposal-pipeline-operator from 7.18.9 to 7.24.7. See this package in npm: https://www.npmjs.com/package/@babel/plugin-proposal-pipeline-operator - @babel/plugin-proposal-throw-expressions from 7.18.6 to 7.24.7. See this package in npm: https://www.npmjs.com/package/@babel/plugin-proposal-throw-expressions - @babel/preset-env from 7.21.5 to 7.25.4. See this package in npm: https://www.npmjs.com/package/@babel/preset-env - @sentry/node from 7.51.0 to 7.119.0. See this package in npm: https://www.npmjs.com/package/@sentry/node - @sentry/tracing from 7.51.0 to 7.119.0. See this package in npm: https://www.npmjs.com/package/@sentry/tracing - aws-sdk from 2.1373.0 to 2.1684.0. See this package in npm: https://www.npmjs.com/package/aws-sdk - axios from 1.4.0 to 1.7.5. See this package in npm: https://www.npmjs.com/package/axios - babel-plugin-add-module-exports from 0.2.1 to 0.3.3. See this package in npm: https://www.npmjs.com/package/babel-plugin-add-module-exports - debug from 2.2.0 to 2.6.9. See this package in npm: https://www.npmjs.com/package/debug - body-parser from 1.13.3 to 1.20.2. See this package in npm: https://www.npmjs.com/package/body-parser - connect-datadog from 0.0.6 to 0.0.9. See this package in npm: https://www.npmjs.com/package/connect-datadog - cookie-parser from 1.3.5 to 1.4.6. See this package in npm: https://www.npmjs.com/package/cookie-parser - dayjs from 1.11.7 to 1.11.13. See this package in npm: https://www.npmjs.com/package/dayjs - express from 4.14.1 to 4.19.2. See this package in npm: https://www.npmjs.com/package/express - file-type from 12.2.0 to 12.4.2. See this package in npm: https://www.npmjs.com/package/file-type - fluent-ffmpeg from 2.1.2 to 2.1.3. See this package in npm: https://www.npmjs.com/package/fluent-ffmpeg - image-size from 0.6.3 to 0.9.7. See this package in npm: https://www.npmjs.com/package/image-size - js-beautify from 1.6.14 to 1.15.1. See this package in npm: https://www.npmjs.com/package/js-beautify - memoizee from 0.4.15 to 0.4.17. See this package in npm: https://www.npmjs.com/package/memoizee - moment from 2.29.4 to 2.30.1. See this package in npm: https://www.npmjs.com/package/moment - xml2js from 0.4.23 to 0.6.2. See this package in npm: https://www.npmjs.com/package/xml2js - nodemailer from 6.9.1 to 6.9.14. See this package in npm: https://www.npmjs.com/package/nodemailer - ramda from 0.26.1 to 0.30.1. See this package in npm: https://www.npmjs.com/package/ramda - redis from 2.6.5 to 2.8.0. See this package in npm: https://www.npmjs.com/package/redis - slack-node from 0.1.8 to 0.2.0. See this package in npm: https://www.npmjs.com/package/slack-node See this project in Snyk: https://app.snyk.io/org/ngaikakwan-pji/project/53081c48-5841-47f0-8625-41c465680731?utm_source=github&utm_medium=referral&page=upgrade-pr

[Snyk] Upgrade: , , , , , , , , , , aws-sdk, axios, babel-plugin-add-module-exports, debug, body-parser, connect-datadog, cookie-parser, dayjs, express, file-type, fluent-ffmpeg, image-size, js-beautify, memoizee, moment, xml2js, nodemailer, ramda, redis, slack-node #65

Are you sure you want to change the base?

[Snyk] Upgrade: , , , , , , , , , , aws-sdk, axios, babel-plugin-add-module-exports, debug, body-parser, connect-datadog, cookie-parser, dayjs, express, file-type, fluent-ffmpeg, image-size, js-beautify, memoizee, moment, xml2js, nodemailer, ramda, redis, slack-node #65

Conversation

hadeseggplant commented Sep 18, 2024

Snyk has created this PR to upgrade multiple dependencies.

Issues fixed by the recommended upgrade:

v7.25.2 (2024-07-30)

🐛 Bug Fix

Committers: 2

v7.24.9 (2024-07-15)

🐛 Bug Fix

💅 Polish

🏠 Internal

Committers: 5

v7.24.7 (2024-06-05)

🐛 Bug Fix

🏠 Internal

Committers: 7

v7.24.6 (2024-05-24)

🐛 Bug Fix

🏠 Internal

Committers: 9

v7.24.1 (2024-03-19)

🐛 Bug Fix

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 4

v7.24.7 (2024-06-05)

🐛 Bug Fix

🏠 Internal

Committers: 7

v7.24.6 (2024-05-24)

🐛 Bug Fix

🏠 Internal

Committers: 9

v7.24.1 (2024-03-19)

🐛 Bug Fix

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 4

v7.24.7 (2024-06-05)

🐛 Bug Fix

🏠 Internal

Committers: 7

v7.24.6 (2024-05-24)

🐛 Bug Fix

🏠 Internal

Committers: 9

v7.24.1 (2024-03-19)

🐛 Bug Fix

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 4